985b1cd4f904a989c5ab5564c1208d9369e6008bc54801306009fe133f359ad8

Sharing

Copy URL Twitter E-mail

General

Target

985b1cd4f904a989c5ab5564c1208d9369e6008bc54801306009fe133f359ad8
Size

299KB
MD5

075dd5ae5fae0e012ae2faf0aa738010
SHA1

3f8511a0374efc53b2d61a4da0594a2dd56f6df4
SHA256

985b1cd4f904a989c5ab5564c1208d9369e6008bc54801306009fe133f359ad8
SHA512

f93f7e64f4d6a1ba26e5dbc8647f7de573dadd69c0bcc40a108baab438ead0c82c0cb59adfcba6ba38a3f463a9489aa7b358c0493a96953ef004d56dfc47ce5c
SSDEEP

6144:HH+bAYIaIEBMj/KO+mDeokFFOaojaGvbLquucYLTa+CHCGBp5IzzhLfr:n+bMaF2j/KOx48hbL7YvvcCGBPIl

Score

N/A

Malware Config

Signatures

Files

985b1cd4f904a989c5ab5564c1208d9369e6008bc54801306009fe133f359ad8
.exe windows x86

6082bda2db05059f19e792b7277f885f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
GetLastError
InterlockedIncrement
InterlockedExchange
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
SetLastError
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
CloseHandle
CreateThread
CreateEventW
InitializeCriticalSectionAndSpinCount
OpenEventW
LocalFree
GetModuleHandleA
InterlockedDecrement
GlobalFree
GetWindowsDirectoryW
GetModuleHandleW
lstrcpyW
lstrlenW
GetProcAddress
lstrcmpW
GlobalUnlock
GlobalLock
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
VirtualProtect
VirtualFree
GetCurrentProcessId
VirtualAlloc
GetStartupInfoA

user32

WinHelpW
EnableWindow
GetDlgItem
RegisterClipboardFormatW
GetParent
SendMessageW
wsprintfW
MessageBoxW
GetWindowLongW
IsDlgButtonChecked
EndDialog
CheckDlgButton
EnumDisplayDevicesW
LoadStringW
SetDlgItemTextW
SetWindowLongW
ChangeDisplaySettingsW
DefWindowProcW
DispatchMessageW
TranslateMessage
FindWindowW
PostMessageW
SetTimer
KillTimer
PeekMessageW
MsgWaitForMultipleObjects
DialogBoxParamW
SetWindowPos

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegNotifyChangeKeyValue
RegOpenKeyExW

gdi32

CreateFontIndirectA
SetTextColor
SetBkColor
GetTextColor
DeleteObject
SelectObject

msvcr71

free
_onexit
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_amsg_exit
_wcsicmp
_stricmp
_callnewh
malloc
__dllonexit
_lock
_adjust_fdiv
_unlock
wcsstr
towupper
_except_handler3
sprintf
_controlfp

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6082bda2db05059f19e792b7277f885f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

msvcr71

Sections

.text Size: 292KB - Virtual size: 292KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 268KB

.sxdata Size: 512B - Virtual size: 8B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 292KB - Virtual size: 292KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 268KB

.sxdata
Size: 512B - Virtual size: 8B

.rsrc
Size: 1KB - Virtual size: 1KB