e6266c04898080d065e66ef28c081852f5375f3ec7873e10e4abc4d8b91823b3

Sharing

Copy URL Twitter E-mail

General

Target

e6266c04898080d065e66ef28c081852f5375f3ec7873e10e4abc4d8b91823b3
Size

56KB
MD5

08f8364f12bcec742e751c49c44deaff
SHA1

46f28edc9838b284799f4f7bce16d8e12edd9ebb
SHA256

e6266c04898080d065e66ef28c081852f5375f3ec7873e10e4abc4d8b91823b3
SHA512

0a6b8f3ba786e78c0e5843a6f588fee1b8d62109d4bbf4c1e061d01571b80c742b3cefe6343d707f33b6db59dcc2b613646ea5a004358d0c876746a1e7f3f246
SSDEEP

768:FVNT/MAOGtp5IK/2Qv3aWcduECvL54edeX5yargXaEOAimLYXswdz3pvrdM/a3:FVNMGp/v3aNCvLq1qaEOqLYXsQzZvL

Score

N/A

Malware Config

Signatures

Files

e6266c04898080d065e66ef28c081852f5375f3ec7873e10e4abc4d8b91823b3
.exe windows x86

9b4e6aeaae05a0235daa214b76ae7d0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetLastError
GetTickCount
GetCurrentProcess
MultiByteToWideChar
GetSystemDirectoryW
GetVersionExA
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetCurrentThreadId
HeapCreate
ExitProcess
GetModuleFileNameA
GetEnvironmentStringsW
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
CreateMutexW
GetProcAddress

user32

GetSystemMetrics
GetDesktopWindow
WinHelpA
RegisterClassW
GetMenuItemInfoW
IsDlgButtonChecked
SetDlgItemTextA
GetClassInfoW
GetKeyboardLayout
LoadIconW
GetSysColorBrush
SetForegroundWindow
GetClassInfoExA
GetMessageW
GetMenuStringW
SetMenu
RegisterWindowMessageW
LoadImageA
SetCursorPos
EnableWindow
GetForegroundWindow
MonitorFromRect
DestroyIcon
PostMessageA
CreateDialogIndirectParamW
DialogBoxIndirectParamW
AdjustWindowRect

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW

uxtheme

GetThemeBool
CloseThemeData

gdi32

CreateFontIndirectExA
CreateColorSpaceW
RemoveFontResourceA
GetTextExtentPointA
StretchDIBits
DeleteObject
CreatePen
SetEnhMetaFileBits
CreatePalette

Sections

.text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LU
Size: 512B - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v
Size: 12KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.TrSSs
Size: 4KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oVPl
Size: 9KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b4e6aeaae05a0235daa214b76ae7d0c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

uxtheme

gdi32

Sections

.text Size: 12KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 21KB

.LU Size: 512B - Virtual size: 339KB

.v Size: 12KB - Virtual size: 99KB

.TrSSs Size: 4KB - Virtual size: 213KB

.data Size: 4KB - Virtual size: 147KB

.oVPl Size: 9KB - Virtual size: 71KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 12KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 21KB

.LU
Size: 512B - Virtual size: 339KB

.v
Size: 12KB - Virtual size: 99KB

.TrSSs
Size: 4KB - Virtual size: 213KB

.data
Size: 4KB - Virtual size: 147KB

.oVPl
Size: 9KB - Virtual size: 71KB

.rsrc
Size: 9KB - Virtual size: 9KB