c06b9878b92ad59daa2116ccfa74713c0d6a3810689bef049ad5d99232f8cf25

Sharing

Copy URL Twitter E-mail

General

Target

c06b9878b92ad59daa2116ccfa74713c0d6a3810689bef049ad5d99232f8cf25
Size

227KB
MD5

1f4e68edcb883f59ce3eeabaa18fc130
SHA1

cb5bd65e67ab44f350cc1f2203bf3080f20e9e2d
SHA256

c06b9878b92ad59daa2116ccfa74713c0d6a3810689bef049ad5d99232f8cf25
SHA512

9368e250be82ad5d7d05b7962736e8f98d2a7fa4cd6e17b416501639f93639a6b0687a42c085508acd27bfc6ad27da9371ab58d09f8a8a3349d216eb782811f5
SSDEEP

6144:zwVcECbBYzIwTOKBOB/zk583tLsh3CKTDXz2LNS:0VJCbKzIwTOKoB/zw83Z4CUDXqL

Score

N/A

Malware Config

Signatures

Files

c06b9878b92ad59daa2116ccfa74713c0d6a3810689bef049ad5d99232f8cf25
.exe windows x86

d5406a7878262a8917afafd43fdbc868

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmioAdvance
waveOutGetPitch
mixerOpen
timeGetSystemTime

user32

GetWindowLongA
GetMenuState
GetMenuItemID
ShowWindow
SetWindowLongA
PostQuitMessage
CopyRect
SetActiveWindow
IsDialogMessageA
LoadBitmapA
SetPropA
GetWindow
EndDialog
SetMenuItemBitmaps
PeekMessageA
GetKeyState
UnhookWindowsHookEx
GetSubMenu
CallWindowProcA
SetForegroundWindow
GetMenuItemCount
GetDlgCtrlID
GetWindowPlacement
IsWindowEnabled
GetSysColorBrush
GetMenuCheckMarkDimensions
GetTopWindow
SendDlgItemMessageA
IsWindow
ExitWindowsEx
GetWindowRect
UpdateWindow
DrawIcon
EndPaint
PtInRect
SetWindowPos
GrayStringA
GetMessageA
GetWindowTextLengthA
MessageBoxA
CallNextHookEx
GetWindowTextA
LoadStringA
GetMessagePos
CharUpperA
GetActiveWindow
WinHelpA
UnregisterClassA
RegisterClassA
SetWindowTextA
EnableMenuItem
SystemParametersInfoA
ReleaseDC
DestroyMenu
GetFocus
GetMenu
GetForegroundWindow
wsprintfA
CreateDialogIndirectParamA
GetLastActivePopup
CheckMenuItem
GetCapture
PostMessageA
TranslateMessage
LoadCursorA
MapWindowPoints
BeginPaint
GetClassInfoA
SendMessageA
EnableWindow
ClientToScreen
GetPropA
GetCursorPos
GetClassNameA
SetWindowsHookExA
GetSystemMetrics
GetSysColor
GetClientRect
GetDlgItem
DestroyWindow
LoadIconA
GetParent
IsWindowVisible
RemovePropA
GetDC
DefWindowProcA
ValidateRect
CreateWindowExA

gdi32

SaveDC
GetClipBox
RestoreDC
TextOutA
SetMapMode
DeleteObject
ExtTextOutA
GetDeviceCaps
GetRelAbs
DeleteDC
SetWindowExtEx
ScaleViewportExtEx
RoundRect
CreateDIBitmap
CreateEllipticRgn
SetViewportExtEx
CreateBitmap

kernel32

GetCurrentThread
SetStdHandle
DuplicateHandle
GetThreadLocale
GetStringTypeA
Beep
TlsGetValue
SetEnvironmentVariableA
GlobalFlags
lstrcpynA
FindResourceA
IsBadCodePtr
GetCurrentDirectoryA
InitializeCriticalSection
GetEnvironmentStringsA
FreeEnvironmentStringsA
LocalUnlock
LockResource
GetCommandLineA
LCMapStringA
lstrlenA
lstrcmpA
GetWindowsDirectoryA
GetFileAttributesA
CompareStringA
GetOEMCP
LCMapStringW
FileTimeToSystemTime
GetFullPathNameA
IsDebuggerPresent
SetLastError
Sleep
Toolhelp32ReadProcessMemory
GetACP
GetModuleHandleA
FindClose
FlushFileBuffers
GlobalFree
HeapCreate
GetTimeZoneInformation
GetStdHandle
LeaveCriticalSection
HeapAlloc
InterlockedDecrement
HeapReAlloc
lstrcmpiA
LocalFileTimeToFileTime
TlsSetValue
GetVersion
LocalReAlloc
GlobalLock
SetSystemTime
GetEnvironmentVariableA
GetModuleFileNameA
CreateFileA
SystemTimeToFileTime
EnterCriticalSection
RaiseException
TlsFree
SetConsoleCursorInfo
GlobalUnlock
ExitProcess
GetCurrentProcess
CompareStringW
WideCharToMultiByte
SetErrorMode
CloseHandle
IsValidLocale
LoadLibraryA
SystemTimeToTzSpecificLocalTime
GetFileSize
ClearCommError
FileTimeToLocalFileTime
RtlUnwind
GetVersionExA
SetUnhandledExceptionFilter
GetCPInfo
HeapFree
GetSystemDirectoryA
GetDriveTypeA
HeapSize
FindFirstFileA
MulDiv
HeapDestroy
GetFileType
ReadFile
LoadResource
InterlockedIncrement
DosDateTimeToFileTime
lstrcatA
InitializeSListHead
FindNextFileA
SetEndOfFile
IsBadWritePtr
SetFilePointer
GlobalGetAtomNameA
GetProcAddress
WriteFile
LocalAlloc
ReleaseActCtx
VirtualAlloc
GetEnvironmentStringsW
SetConsoleTextAttribute
GetCurrentThreadId
LocalFree
GetStringTypeW
IsBadReadPtr
SetCurrentDirectoryA
GetStartupInfoA
GlobalHandle
GlobalFindAtomA
GlobalAddAtomA
DeleteCriticalSection
GetLastError
GetProcessVersion
DeleteFileA
FreeEnvironmentStringsW
SetHandleCount
lstrcpyA
MultiByteToWideChar
FreeLibrary
VirtualFree
TlsAlloc
GetFileTime
UnhandledExceptionFilter
FlushInstructionCache
LockFile
UnlockFile
GlobalDeleteAtom
GetVolumeInformationA
SetFileAttributesA
GlobalAlloc

comdlg32

GetFileTitleA

advapi32

RegCloseKey
RegCreateKeyExA
AddUsersToEncryptedFile
LsaEnumeratePrivileges
SystemFunction016
LsaICLookupNamesWithCreds
OpenThreadToken
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
MSChapSrvChangePassword
AddAccessDeniedAceEx
LockServiceDatabase
SetSecurityDescriptorControl
GetAclInformation

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5406a7878262a8917afafd43fdbc868

Headers

File Characteristics

Imports

winmm

user32

gdi32

kernel32

comdlg32

advapi32

Sections

.text Size: 200KB - Virtual size: 199KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 200KB - Virtual size: 199KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 1KB - Virtual size: 1KB