9d72fd8d744d284ad5fc9173edf0ee2ca78d0e3309e106d834400570e49568e2

Sharing

Copy URL Twitter E-mail

General

Target

9d72fd8d744d284ad5fc9173edf0ee2ca78d0e3309e106d834400570e49568e2
Size

140KB
MD5

8936b736534937e1dcd654dbaa60e705
SHA1

954ef1a522dcf7abd4fffa15de5521281f9b6f92
SHA256

9d72fd8d744d284ad5fc9173edf0ee2ca78d0e3309e106d834400570e49568e2
SHA512

9eb85b3ccd9c778c7426b7b3a850bab5eaf66e20197a6a19efa4bfc7db93df512159f8549b9de392a03b66eeba53b0c0b939b192a2998b728b680116407ee79c
SSDEEP

3072:Cibt6VxDQfBTrTqbFtMuwFF3yzca+LEQrQzzMYztGNf/xqNbs:neCTrePMpF8d+LESQ9ANMb

Score

N/A

Malware Config

Signatures

Files

9d72fd8d744d284ad5fc9173edf0ee2ca78d0e3309e106d834400570e49568e2
.exe windows x86

51fd6512bb5a3fa4ac508c90ccf39c11

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlGetLocationA

user32

IsDialogMessageW
DestroyWindow
CallWindowProcA
GetUserObjectInformationW
CharPrevA
OpenIcon
IsCharAlphaA
DrawMenuBar
wsprintfW
GetKeyState
DefWindowProcW
ShowOwnedPopups
GetSysColor
GetUserObjectInformationA
TranslateAcceleratorW
GetMessageTime
SetRectEmpty
GetCursorPos
GetSysColorBrush
GetMenu
CreateIconIndirect
SetWindowRgn
PostMessageW
GetKeyboardType
GetWindowTextLengthW
CharToOemBuffA
DeleteMenu
WaitMessage
GetPropW
GetKeyboardLayoutNameW
PostThreadMessageW
DestroyAcceleratorTable
DestroyCaret
SetMenuItemInfoW
SetForegroundWindow
RegisterWindowMessageW
SetParent
GetWindowTextW
SetPropW
BeginDeferWindowPos
MoveWindow
GetScrollPos
ModifyMenuW
DrawTextW
LoadStringA
CreateAcceleratorTableW
AppendMenuW
ClientToScreen
TrackPopupMenu
MessageBoxW
PeekMessageA
CharUpperW
TrackPopupMenuEx
OffsetRect
CharToOemW
FillRect
EnableScrollBar
DispatchMessageW
IsCharUpperA
GetMessageA
GetClipCursor
SetMenuDefaultItem
LoadAcceleratorsA
GetMenuItemInfoW
IsRectEmpty
RegisterClassExW
HideCaret
SetDlgItemTextA
InflateRect
ChildWindowFromPointEx
GetTopWindow
EnumThreadWindows
HiliteMenuItem
GetMenuStringA
CheckRadioButton
ToUnicodeEx
SendMessageTimeoutW
CharLowerW
IsCharAlphaNumericW
CharNextExA
CreateDialogIndirectParamW
KillTimer
DrawStateA
SetFocus
CreateCaret

comdlg32

CommDlgExtendedError
PrintDlgExW
ReplaceTextW
ChooseColorW

msvcrt

remove
_controlfp
wcscspn
__set_app_type
wcscoll
strrchr
__p__fmode
wcsstr
__p__commode
iswspace
setvbuf
_amsg_exit
putchar
iswctype
_initterm
system
wcspbrk
_ismbblead
_XcptFilter
_exit
_cexit
strncpy
__setusermatherr
isalnum
putc
gmtime
wcscat
wcscpy
__getmainargs
iswalpha
fgets
mbtowc
malloc
printf
setlocale
fwrite

kernel32

SetHandleCount
LoadLibraryW
SetMailslotInfo
LocalReAlloc
GetComputerNameW
SetFileApisToOEM
CopyFileW
GlobalFree
ReadFile
FindFirstChangeNotificationW
VirtualQuery
GetCommandLineA
LoadLibraryExA
TlsFree
OpenEventW
SetSystemTimeAdjustment
LocalLock
CompareStringW
GetModuleFileNameA
LocalUnlock
TlsSetValue
GetModuleHandleA
RegisterWaitForSingleObject
DeleteFileW
CreatePipe
GetSystemDefaultUILanguage
GetModuleFileNameW
RaiseException
CreateWaitableTimerA
GetTickCount
CompareFileTime
SizeofResource
GetStartupInfoA
GetWindowsDirectoryA
GetCommTimeouts
HeapLock
WaitForMultipleObjectsEx
CreateEventW
FindNextFileW
GetExitCodeThread

Exports

Exports

?HistoryLoggingOn@@YGKDKPAX:O

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdbg
Size: 512B - Virtual size: 125B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iplan
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eplan
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.run
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.0dat
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ram
Size: - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51fd6512bb5a3fa4ac508c90ccf39c11

Headers

File Characteristics

Imports

shlwapi

user32

comdlg32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdbg Size: 512B - Virtual size: 125B

.data Size: 2KB - Virtual size: 2KB

.iplan Size: 4KB - Virtual size: 4KB

.eplan Size: 512B - Virtual size: 91B

.run Size: 1024B - Virtual size: 582B

.0dat Size: 104KB - Virtual size: 104KB

.ram Size: - Virtual size: 123KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdbg
Size: 512B - Virtual size: 125B

.data
Size: 2KB - Virtual size: 2KB

.iplan
Size: 4KB - Virtual size: 4KB

.eplan
Size: 512B - Virtual size: 91B

.run
Size: 1024B - Virtual size: 582B

.0dat
Size: 104KB - Virtual size: 104KB

.ram
Size: - Virtual size: 123KB

.rsrc
Size: 2KB - Virtual size: 1KB