56caafde3f35b381d544f1b72ec2b6707c5326a72e616304ebf0362574785b9b

Sharing

Copy URL Twitter E-mail

General

Target

56caafde3f35b381d544f1b72ec2b6707c5326a72e616304ebf0362574785b9b
Size

196KB
MD5

1c3ec5ca90f228dfbd6ab5da02e1e120
SHA1

5058a3aa801fa48f2234d1724a21e334e5d513e1
SHA256

56caafde3f35b381d544f1b72ec2b6707c5326a72e616304ebf0362574785b9b
SHA512

d8da818fa426f019cb27de284aea3aae4e5ae2001252d5c7058288fc481602e4c4d7f35016ff53ceb0f1c8e84b6db5407357a3211c10beb1aab35e9b8452ae5e
SSDEEP

6144:+k367Hqt2jycgL+rhHKKV2BsdZhgTj8N9BXN:NiHKp+lrmsbhgTj8FXN

Score

N/A

Malware Config

Signatures

Files

56caafde3f35b381d544f1b72ec2b6707c5326a72e616304ebf0362574785b9b
.exe windows x86

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextW
wsprintfW
LoadIconW
DialogBoxParamW
ReleaseDC
SendDlgItemMessageW
SetCursor
MessageBoxW
EndDialog
LoadStringW
SetWindowLongW
GetDlgItemTextA
RegisterClipboardFormatW
GetParent
LoadCursorW
PostMessageW
SetFocus
GetWindowLongW
InsertMenuItemW
SystemParametersInfoW
WinHelpW
LoadBitmapW
EnableWindow
GetDlgItem
LoadImageW
GetDC
SendMessageW
SetWindowTextW

kernel32

WideCharToMultiByte
DeleteCriticalSection
IsValidCodePage
lstrcmpiW
OutputDebugStringW
GetStartupInfoA
GlobalUnlock
GetComputerNameW
LocalReAlloc
GetCPInfo
LoadLibraryW
CloseHandle
DeleteFileA
LocalFree
CreateFileW
GetCurrentProcess
InterlockedDecrement
GetEnvironmentStringsA
lstrlenW
SetUnhandledExceptionFilter
GetProcAddress
InitializeCriticalSection
GlobalLock
GetSystemTimeAsFileTime
MultiByteToWideChar
GetModuleFileNameW
GlobalAlloc
IsBadReadPtr
GetTickCount
FileTimeToSystemTime
FormatMessageW
lstrcpyW
GetDateFormatW
OutputDebugStringA
GetModuleHandleA
GetSystemWindowsDirectoryW
QueryPerformanceCounter
FileTimeToLocalFileTime
SetLastError
InterlockedIncrement
GetLastError
GlobalFree

certcli

CAGetCertTypeProperty
CAEnumNextCertType
CAFreeCertTypeExtensions
CAFindCertTypeByName
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypePropertyEx
CAFindByName
CASetCertTypeFlags
CACloseCA
CACreateCertType
CAGetCertTypeFlags
CAGetCAProperty
CACertTypeSetSecurity
CACertTypeGetSecurity
CAFreeCAProperty
CACloseCertType
CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CAAddCACertificateType
CASetCertTypeExtension
CAEnumCertTypes
CAGetCertTypeKeySpec
CAGetCertTypeExtensions
CAUpdateCA
CAEnumCertTypesForCA

msvcrt

_adjust_fdiv
_wcsicmp
_purecall
wcsstr
vswprintf
wcstoul
_initterm
malloc
??1type_info@@UAE@XZ
wcschr
memmove
wcscpy
wcslen
__dllonexit
?terminate@@YAXXZ
_wcsupr
_onexit
__RTDynamicCast
??3@YAXPAX@Z
wcsrchr
wcscat
free
mbstowcs
_except_handler3
??2@YAPAXI@Z
wcscmp

shell32

ShellExecuteW
ShellExecuteExW

advapi32

RegDeleteValueW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW

gdi32

CreateFontIndirectW
DeleteObject
GetDeviceCaps

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 78KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e97c456eff8a4b1fba5d60ca58d6cd00

Headers

File Characteristics

Imports

user32

kernel32

certcli

msvcrt

shell32

advapi32

gdi32

comctl32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 45KB - Virtual size: 44KB

.hdata Size: 78KB - Virtual size: 3.2MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 45KB - Virtual size: 44KB

.hdata
Size: 78KB - Virtual size: 3.2MB

.rsrc
Size: 3KB - Virtual size: 2KB