4c4a90d0dd320fb31011d5862c370987bad073a5d58093c6ded8fbdb56a1daf8

Sharing

Copy URL Twitter E-mail

General

Target

4c4a90d0dd320fb31011d5862c370987bad073a5d58093c6ded8fbdb56a1daf8
Size

163KB
MD5

02ddc032d6a5f2db409a8beeeff2ac60
SHA1

e115db424cce5363ce56d560dc10ca6cc985e942
SHA256

4c4a90d0dd320fb31011d5862c370987bad073a5d58093c6ded8fbdb56a1daf8
SHA512

417d97a8f7f79758a066964b5ea90774b955dfcd2ed773c60426f849520dc40d0008ef877856c16052831956ceaf4ae483fe7fe10641d9be6fecd6783faba602
SSDEEP

3072:nZaygQcSvvqUqT+jaNR1mjxE558ZC3TmeUgiVxPfFTcJHoJoTAhZw8s2JMn:4+c4qUQ+A5AuyzgiVxnFTsHo+A3E

Score

N/A

Malware Config

Signatures

Files

4c4a90d0dd320fb31011d5862c370987bad073a5d58093c6ded8fbdb56a1daf8
.exe windows x86

45dfc3efb9f16609750aad30bab2779d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
SysReAllocStringLen
VariantChangeTypeEx
VariantCopyInd

ole32

IsEqualGUID

advapi32

RegOpenKeyA
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
AdjustTokenPrivileges

user32

DestroyMenu
LoadStringA
DefMDIChildProcA
GetFocus
SetScrollInfo
IsWindowEnabled
CreateIcon
ExitWindowsEx
SetWindowLongA
GetKeyNameTextA
TranslateMessage
MapVirtualKeyA
GetMenu
SetActiveWindow
GetWindow
SendMessageA
DefFrameProcA
IntersectRect
LoadBitmapA
GetWindowTextA
CreateWindowExA
GetWindowLongA
PeekMessageA
KillTimer
DrawFrameControl
CreatePopupMenu
RemoveMenu
GetDesktopWindow
IsRectEmpty
GetMenuItemID
LoadIconA
PtInRect
GetLastActivePopup
ScrollWindow
DrawTextA
WindowFromPoint
GetActiveWindow
GetKeyboardState
InvalidateRect
EqualRect
GetTopWindow
CallWindowProcA
UpdateWindow
RedrawWindow
SetClassLongA
IsWindow
SetWindowPos
ClientToScreen
CheckMenuItem
GetWindowRect
GetMenuItemInfoA
GetMenuStringA
DrawIconEx
RegisterClipboardFormatA
GetCursor
GetPropA
SetScrollRange
IsZoomed
GetClipboardData
DrawIcon
GetCursorPos
GetDCEx
RegisterClassA
CharNextA
GetKeyState
SetMenu
SetCursor
LoadCursorA
SetMenuItemInfoA
UnregisterClassA
IsDialogMessageA
FindWindowA
EndPaint
BeginPaint
wsprintfA
AdjustWindowRectEx
GetForegroundWindow
CreateMenu
UnhookWindowsHookEx
DestroyWindow
SetWindowPlacement
IsIconic
SetScrollPos
MessageBoxA
TranslateMDISysAccel
GetWindowPlacement
DispatchMessageA
GetWindowDC
GetClassInfoA
EnableMenuItem
MapWindowPoints
GetWindowThreadProcessId
ScreenToClient
FillRect
TrackPopupMenu
SetCapture
DeleteMenu
DrawEdge
ShowOwnedPopups
SetPropA
EnumWindows
GetSystemMetrics
SetRect
GetMenuItemCount
GetMenuState
IsWindowVisible
InflateRect
CharLowerBuffA
ShowCursor
GetScrollRange
ShowWindow
SetWindowsHookExA
DestroyIcon
CallNextHookEx
GetCapture
GetIconInfo
WinHelpA
GetDC
GetScrollPos
PostQuitMessage
GetKeyboardLayoutList
InsertMenuA
OffsetRect
LoadKeyboardLayoutA
IsChild
DestroyCursor
PostMessageA
OemToCharA
CharLowerA
GetScrollInfo
SetForegroundWindow
GetClientRect
ActivateKeyboardLayout
InsertMenuItemA
EnumThreadWindows
SetTimer
FrameRect
SetFocus
SystemParametersInfoA
RegisterWindowMessageA
DefWindowProcA
GetKeyboardLayout
ReleaseCapture
GetSystemMenu
EnableWindow
GetSubMenu
EnableScrollBar
GetSysColor
ReleaseDC
DrawMenuBar
GetKeyboardType
RemovePropA
ShowScrollBar
WaitMessage

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetCPInfo
GetLocalTime
GetPrivateProfileStringA
GetStringTypeW
EnterCriticalSection
FreeLibrary
lstrcpynA
GetTickCount
GetThreadLocale
Sleep
CompareStringA
RtlUnwind
WriteFile
GetVersionExA
GetStdHandle
GetCurrentProcessId
CreateFileA
SetLastError
InitializeCriticalSection
GetModuleHandleA
LockResource
GetVersion
lstrcmpA
HeapAlloc
WinExec
EnumCalendarInfoA
GetLocaleInfoA
GetCurrentProcess
GlobalLock
GlobalUnlock
lstrcpyA
GetProcAddress
TlsSetValue
TlsGetValue
GetWindowsDirectoryA
LocalFree
SetEndOfFile
FindClose
GlobalReAlloc
TlsFree
TlsAlloc
GetFileType
GetProcessHeap
GetACP
WaitForSingleObject
GetModuleFileNameA
lstrlenA
LoadLibraryExA
InterlockedIncrement
LoadLibraryA
GlobalAlloc
LocalAlloc
SetFilePointer
CreateEventA
VirtualQuery
SizeofResource
ReadFile
SetConsoleCtrlHandler
GetFileSize
SetErrorMode
FreeResource
GetCommandLineA
VirtualAlloc
SetEvent
GlobalFree
GlobalDeleteAtom
GetDiskFreeSpaceA
FormatMessageA
DeleteFileA
WideCharToMultiByte
GetCurrentThreadId
UnhandledExceptionFilter
HeapFree
ExitProcess
SetHandleCount
GetStartupInfoA
RaiseException
FindResourceA
GetEnvironmentStringsA
CreateThread
GlobalAddAtomA
GetSystemDirectoryA
GetSystemInfo
MulDiv
LeaveCriticalSection
FindFirstFileA
GetOEMCP
DeleteCriticalSection
CloseHandle
VirtualFree
MultiByteToWideChar
GetLastError
GlobalHandle
LoadResource
InterlockedDecrement
SetThreadLocale

Sections

.text
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45dfc3efb9f16609750aad30bab2779d

Headers

File Characteristics

Imports

oleaut32

ole32

advapi32

user32

version

kernel32

Sections

.text Size: 137KB - Virtual size: 137KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 13KB - Virtual size: 15KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 137KB - Virtual size: 137KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 13KB - Virtual size: 15KB

.rsrc
Size: 2KB - Virtual size: 1KB