c631b306e7ddb8979c34adcac570b34faa8204621777ff5fd006f8b70f4393fb

Sharing

Copy URL

Twitter E-mail

General

Target

c631b306e7ddb8979c34adcac570b34faa8204621777ff5fd006f8b70f4393fb
Size

52KB
MD5

5311972674bb53dbf57a05c6b7066343
SHA1

2b1ab58a8f977b76adcf9e170809ebf7a87f98c0
SHA256

c631b306e7ddb8979c34adcac570b34faa8204621777ff5fd006f8b70f4393fb
SHA512

8f041fd07e804492059f8f2ff3d67a6ec37cb90948a0e148073665959b70b86dca74d282adf27764dabbabad893dfb61ed58cad0ebb551bd9dfe6b457a27dbd4
SSDEEP

768:5cnjQZuRVgmzqVPacHg2T0aYfwWA54awzIGTFDVKWu7AMGXo9m9y:5cjeuDsHg2TOs4aopZVkAMfd

Score

N/A

Malware Config

Signatures

Files

c631b306e7ddb8979c34adcac570b34faa8204621777ff5fd006f8b70f4393fb
.exe windows x86

0c4e4a650e729b091c9953383972154a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBitmapBits
CreateHalftonePalette
GetROP2
SetWindowOrgEx
SelectObject
SaveDC
GetObjectA
CreateDIBSection
CreateSolidBrush
EnumFontsW
ExtTextOutA
GetTextCharsetInfo
RemoveFontResourceW

ntdll

memset

user32

MessageBoxA
SetDlgItemInt
IsCharAlphaNumericW
SystemParametersInfoA
CharUpperBuffA
SetUserObjectInformationW
SetDlgItemTextA
DeleteMenu
WindowFromPoint
GetUpdateRgn
SetForegroundWindow
GetActiveWindow
SetFocus
CharToOemBuffA
FillRect
GetDialogBaseUnits
SendDlgItemMessageW
DefDlgProcA
GetWindowPlacement
GetForegroundWindow
ShowWindow
SetParent
MonitorFromPoint
GetUpdateRect
ShowCursor
CopyRect
GetClassInfoExW
CreatePopupMenu

shlwapi

UrlGetPartW
ColorRGBToHLS
StrSpnW
StrCmpW

kernel32

SetTimerQueueTimer
GetTempPathW
GetFileAttributesExA
GetTimeZoneInformation
WaitForMultipleObjectsEx
UnmapViewOfFile
lstrcpyA
lstrlenW
FindFirstFileW
WaitForDebugEvent
GetSystemWindowsDirectoryW
CompareStringA
SetThreadAffinityMask
GetModuleHandleW
GetCurrentProcessId
lstrcatA
ConnectNamedPipe
GetCommProperties

comdlg32

GetOpenFileNameA
FindTextW
GetSaveFileNameW
ChooseFontW

Exports

Exports

?__qKTSjT_TWNWI_SX@@YGXJ@Z

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c4e4a650e729b091c9953383972154a

Headers

File Characteristics

Imports

gdi32

ntdll

user32

shlwapi

kernel32

comdlg32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 26KB

.idata Size: 3KB - Virtual size: 3KB

.data Size: 6KB - Virtual size: 37KB

.rsrc Size: 13KB - Virtual size: 16KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 26KB

.idata
Size: 3KB - Virtual size: 3KB

.data
Size: 6KB - Virtual size: 37KB

.rsrc
Size: 13KB - Virtual size: 16KB

.reloc
Size: 1KB - Virtual size: 1KB