6b38892dcc9f52934eef20607378ed7bc2b4baa28b6377f363a138d339304f42

Sharing

Copy URL Twitter E-mail

General

Target

6b38892dcc9f52934eef20607378ed7bc2b4baa28b6377f363a138d339304f42
Size

196KB
MD5

22ec912a16fcf257ce3a8a92afea4c80
SHA1

d1c0dc99e126cc9c22c0b204a1dfe351b7da18f1
SHA256

6b38892dcc9f52934eef20607378ed7bc2b4baa28b6377f363a138d339304f42
SHA512

9b2bb668098fe4216b716ae0341158cb3fe276475844e20519e82ba9fe5174732042896f91fd288291f8dcdc68b4f6995c3fd31c88d594a3982be5dc0bc1bd87
SSDEEP

3072:nMKoaLwHQrb/EUhPbPBKnKRRvTPvxRZ9oy+x2ml7LT17a4TFZwZt+DUy9rBI:nMKbwQrxNbPBiKv1TQfT7TFqZtGUKW

Score

N/A

Malware Config

Signatures

Files

6b38892dcc9f52934eef20607378ed7bc2b4baa28b6377f363a138d339304f42
.exe windows x86

7e00690ea1465a2a2f7287597f14476a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
GetACP
FileTimeToLocalFileTime
SetUnhandledExceptionFilter
InitializeCriticalSection
WideCharToMultiByte
IsBadReadPtr
InterlockedIncrement
GetProcAddress
SetLastError
GlobalFree
GlobalAlloc
GetCPInfo
LocalReAlloc
GetSystemTimeAsFileTime
InterlockedDecrement
OutputDebugStringA
GlobalLock
lstrlenW
GetComputerNameW
lstrcmpiW
LoadLibraryW
OutputDebugStringW
GetModuleHandleA
GetSystemWindowsDirectoryW
GetStartupInfoA
lstrcpyW
CreateFileW
IsValidCodePage
MultiByteToWideChar
GetModuleFileNameW
GetEnvironmentStringsA
GetTickCount
DeleteCriticalSection
FormatMessageW
GlobalUnlock
LocalFree
CloseHandle
GetDateFormatW
GetLastError
GetCurrentProcess
QueryPerformanceCounter
RemoveDirectoryA

certcli

CAFreeCertTypeExtensions
CASetCertTypeKeySpec
CAGetCertTypeExtensions
CAUpdateCertType
CASetCertTypeExtension
CARemoveCACertificateType
CACreateCertType
CACloseCertType
CAAddCACertificateType
CASetCertTypeFlags
CAGetCertTypeProperty
CAEnumCertTypesForCA
CACertTypeGetSecurity
CAFreeCAProperty
CAFindCertTypeByName
CAGetCertTypeFlags
CACloseCA
CAGetCAProperty
CACertTypeSetSecurity
CASetCertTypeProperty
CAEnumCertTypes
CAUpdateCA
CAFindByName
CAGetCertTypeKeySpec
CAEnumNextCertType
CAGetCertTypePropertyEx
CAFreeCertTypeProperty

gdi32

DeleteObject
GetDeviceCaps
CreateFontIndirectW

msvcrt

_onexit
??1type_info@@UAE@XZ
free
wcscat
__dllonexit
wcsstr
wcscpy
mbstowcs
_except_handler3
wcscmp
_purecall
wcstoul
malloc
??3@YAXPAX@Z
__RTDynamicCast
vswprintf
_adjust_fdiv
??2@YAPAXI@Z
?terminate@@YAXXZ
wcsrchr
_wcsupr
_initterm
wcschr
wcslen
_wcsicmp
memmove

user32

SetWindowLongW
InsertMenuItemW
GetDC
MessageBoxW
LoadIconW
GetParent
LoadBitmapW
PostMessageW
SetCursor
EndDialog
EnableWindow
SystemParametersInfoW
LoadImageW
RegisterClipboardFormatW
LoadStringW
SendDlgItemMessageW
WinHelpW
LoadCursorW
wsprintfW
SendMessageW
SetWindowTextW
DialogBoxParamW
ReleaseDC
GetWindowLongW
SetDlgItemTextW
SetFocus
GetDlgItemTextA
GetDlgItem

advapi32

RegCreateKeyExW
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegCloseKey

comctl32

PropertySheetW
CreatePropertySheetPageW

shell32

ShellExecuteExW
ShellExecuteW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e00690ea1465a2a2f7287597f14476a

Headers

File Characteristics

Imports

kernel32

certcli

gdi32

msvcrt

user32

advapi32

comctl32

shell32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 123KB - Virtual size: 2.3MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 123KB - Virtual size: 2.3MB

.rsrc
Size: 3KB - Virtual size: 2KB