704a4c8cddfc6cc561e9396c4be137ee459a4e86d72c341d7d856a9bcc872ce2

Sharing

Copy URL Twitter E-mail

General

Target

704a4c8cddfc6cc561e9396c4be137ee459a4e86d72c341d7d856a9bcc872ce2
Size

748KB
MD5

30125169156b1dbd34c1482858935140
SHA1

69ed7b71c8de773a04dfbac32005779a8f33392d
SHA256

704a4c8cddfc6cc561e9396c4be137ee459a4e86d72c341d7d856a9bcc872ce2
SHA512

b8d358a0f39a17f4d0ea3affc10cc3c99ee4e49ecc32758ca09dbcd5b6c666e08b1bedd4b86afe808ade9085da7ad44f887ffaac571ba76e1b196851565880eb
SSDEEP

12288:x6nqj5IW3KJbaADVNYRz5bmh7xjjTS6gla+QOjKoSk/vYSqeyFNu1RMWzbyMQn7v:x6taApiRNbmhFj/S6ka0SknVfyqMSbyf

Score

N/A

Malware Config

Signatures

Files

704a4c8cddfc6cc561e9396c4be137ee459a4e86d72c341d7d856a9bcc872ce2
.exe windows x86

1cbc264a3c18d339f5507d1493f7e703

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleInitialize
OleUninitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantClear
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen

advapi32

RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

user32

IsWindow
GetDC
GetCursorPos
SendMessageA
GetClientRect
ClientToScreen
GetKeyState
DestroyWindow
GetParent
UpdateWindow
DefWindowProcA
ShowWindow
EnableWindow
PeekMessageA
TranslateMessage
IsWindowEnabled
GetWindow
LoadStringA
DispatchMessageA
EnableMenuItem
RegisterClassA
SetWindowLongA
GetWindowLongA
CreateWindowExA
FillRect
EndPaint
SetFocus
SetWindowPos
KillTimer
GetSystemMetrics
GetWindowRect
IsIconic
SetCapture
SetWindowTextA
CheckMenuItem
GetSubMenu
SetTimer
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
ReleaseDC
EndDialog
SetDlgItemTextA
MoveWindow
MessageBoxA
GetSysColor
SystemParametersInfoA
IsWindowVisible
wsprintfA
GetFocus
InvalidateRect
CallWindowProcA
SetCursor
LoadBitmapA
PostQuitMessage
DestroyMenu
SetForegroundWindow
BeginPaint

gdi32

SetTextColor
GetStockObject
SelectObject
BitBlt
DeleteDC
GetDeviceCaps
DeleteObject
SetBkColor
CreateCompatibleDC

kernel32

ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetFileAttributesA
WaitForSingleObject
LockResource
GetDriveTypeA
FindNextFileA
HeapDestroy
GetFileAttributesW
GetCommandLineW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleMode
GetLocaleInfoA
LocalAlloc
lstrcatA
GetEnvironmentStrings
SetErrorMode
FreeEnvironmentStringsW
SetStdHandle
GetTempPathA
GetCPInfo
lstrcmpiA
GetStringTypeA
GetTimeZoneInformation
HeapReAlloc
GetStringTypeW
GetFullPathNameA
GetExitCodeProcess
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
OutputDebugStringA
SetLastError
TlsGetValue
GetModuleFileNameW
IsDebuggerPresent
HeapAlloc
FlushFileBuffers
RemoveDirectoryA
lstrcmpiW
LoadLibraryExA
UnhandledExceptionFilter
MultiByteToWideChar
GetLocalTime
CreateMutexA
SetFilePointer
CreateThread
SetFileAttributesA
SetUnhandledExceptionFilter
MulDiv
GetSystemDirectoryA
SetEnvironmentVariableA
TerminateProcess
WriteConsoleA
GlobalAlloc
GetEnvironmentVariableA
RtlUnwind
GetSystemTimeAsFileTime
GetConsoleCP
VirtualAlloc
FindResourceA
Sleep
VirtualFree
WriteFile
UnmapViewOfFile
IsValidCodePage
CreateProcessA
InterlockedExchange
GetDiskFreeSpaceA
GetCurrentThreadId
GetACP
CloseHandle
FindFirstFileA
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
CompareStringA
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
lstrlenW
GetCurrentProcessId
WritePrivateProfileStringA
SizeofResource
CreateProcessW
GetModuleFileNameA
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GlobalFree
lstrlenA
HeapCreate
LoadLibraryExW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CreateFileMappingA
ResetEvent
lstrcpyA
FindNextFileW
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
GetStartupInfoW
GetWindowsDirectoryA
GetModuleHandleW
CreateDirectoryA
LCMapStringW
GetFileSize
GetStartupInfoA
FreeLibrary
DeleteFileA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetVersion
SetEndOfFile

Sections

.text
Size: 600KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1cbc264a3c18d339f5507d1493f7e703

Headers

File Characteristics

Imports

ole32

oleaut32

advapi32

user32

gdi32

kernel32

Sections

.text Size: 600KB - Virtual size: 598KB

.rdata Size: 104KB - Virtual size: 101KB

.data Size: 36KB - Virtual size: 36KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 600KB - Virtual size: 598KB

.rdata
Size: 104KB - Virtual size: 101KB

.data
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 4KB - Virtual size: 1KB