56c71c49ed3f0054c4390f494e53cd29ffb34d5114097c2b2ea9cf97f0542f75

Sharing

Copy URL Twitter E-mail

General

Target

56c71c49ed3f0054c4390f494e53cd29ffb34d5114097c2b2ea9cf97f0542f75
Size

231KB
MD5

05edd0b3031a96d276db7eae8cc8f160
SHA1

2170368aa1b592c964d18ae4ac9b0824aca189f8
SHA256

56c71c49ed3f0054c4390f494e53cd29ffb34d5114097c2b2ea9cf97f0542f75
SHA512

20d376d95dc71ccdadd6f5728cf869052c1b81c6bc3bc81b6527d43628dfc7453d319dcd8851edb33e4c1cd775fd4421e3f17a26ac2cccdd139cbcb53fab683c
SSDEEP

6144:aVxyk4oEIv0fEWHGtb1alCibzysWG/Ck5BcXOyBDYGPnBVu:IyksfEs4bl4ysWGx5cEGPBV

Score

N/A

Malware Config

Signatures

Files

56c71c49ed3f0054c4390f494e53cd29ffb34d5114097c2b2ea9cf97f0542f75
.exe windows x86

001c95a0a68924a4ddb79212b57a983b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
SetForegroundWindow
DrawIcon
DestroyWindow
GetSysColorBrush
GetKeyState
GetDC
GetWindowTextA
GetSystemMetrics
SystemParametersInfoA
UnhookWindowsHookEx
IsWindow
TabbedTextOutA
GetClientRect
IsWindowEnabled
MessageBoxA
GetParent
GetClassNameA
GetSubMenu
GetClassInfoA
SetWindowPos
UpdateWindow
DestroyMenu
LoadCursorA
EnableWindow
GetWindowTextLengthA
GetMenuCheckMarkDimensions
WinHelpA
ExitWindowsEx
LoadBitmapA
ModifyMenuA
SetWindowTextA
ValidateRect
SendMessageA
GetCapture
UnregisterClassA
CharUpperA
PostQuitMessage
CreateWindowExA
GetMenuState
RegisterClassA
GetMessageA
PostMessageA
ClientToScreen
GetPropA
GrayStringA
CheckMenuItem
BeginPaint
CallNextHookEx
IsDialogMessageA
LoadStringA
GetForegroundWindow
GetMenuItemCount
MapWindowPoints
PeekMessageA
GetSysColor
GetWindowPlacement
LoadIconA
GetWindowLongA
SendDlgItemMessageA
EndPaint
GetWindow
SetMenuItemBitmaps
DispatchMessageA
DefWindowProcA
EnableMenuItem
GetFocus
CopyRect
GetDlgCtrlID
GetCursorPos
GetTopWindow
GetMenuItemID
GetMenu
GetLastActivePopup
SetWindowLongA
CallWindowProcA
SetWindowsHookExA
TranslateMessage
SetActiveWindow
GetActiveWindow
RemovePropA
EndDialog
PtInRect
wsprintfA
IsIconic
IsWindowVisible
GetWindowRect
SetPropA
CreateDialogIndirectParamA
ReleaseDC

gdi32

RoundRect
RestoreDC
SelectClipRgn
GetDeviceCaps
GetRelAbs
PtInRegion
TextOutA
DeleteDC
SetViewportExtEx
SetMapMode
DeleteObject
ExtTextOutA
ScaleViewportExtEx
CreateEllipticRgn
EnumEnhMetaFile
CreateBitmap
SaveDC
GdiPlayDCScript
SetWindowExtEx
GetClipBox
CreateDIBitmap

advapi32

RegCloseKey
MSChapSrvChangePassword
SystemFunction030
LockServiceDatabase
AddAccessDeniedAceEx
RegCreateKeyExA
SystemFunction016
AddUsersToEncryptedFile
RegDeleteValueA
OpenThreadToken
RegSetValueExA
GetAclInformation
RegOpenKeyExA
LsaEnumeratePrivileges
LsaICLookupNamesWithCreds
SetSecurityDescriptorControl

comdlg32

GetFileTitleA
dwOKSubclass

kernel32

GetProcessVersion
VirtualAlloc
FlushFileBuffers
GetCPInfo
RtlUnwind
WideCharToMultiByte
ReleaseActCtx
GetVersion
LocalFileTimeToFileTime
IsBadReadPtr
GetFileTime
SetUnhandledExceptionFilter
GlobalGetAtomNameA
Toolhelp32ReadProcessMemory
SetConsoleCursorInfo
GetFileType
lstrcpyA
LocalReAlloc
EnterCriticalSection
LCMapStringW
GetCurrentProcess
lstrlenA
GetCurrentThreadId
FileTimeToLocalFileTime
IsValidLocale
GetDriveTypeA
SystemTimeToFileTime
SetSystemTime
DeleteCriticalSection
GetCommandLineA
Beep
GetOEMCP
GetFullPathNameA
ClearCommError
LockResource
FindNextFileA
InterlockedDecrement
GetCurrentDirectoryA
GetTimeZoneInformation
SetTimeZoneInformation
IsBadCodePtr
GlobalAddAtomA
SetEndOfFile
VirtualFree
GetWindowsDirectoryA
CloseHandle
HeapReAlloc
Sleep
DosDateTimeToFileTime
DeleteFileA
lstrcmpA
FindFirstFileA
GetModuleHandleA
CompareStringW
TlsSetValue
GetACP
GetCurrentThread
GetEnvironmentStringsW
SetHandleCount
HeapSize
IsDebuggerPresent
GlobalFlags
FatalExit
HeapDestroy
MulDiv
GlobalUnlock
GetStringTypeW
RaiseException
GlobalDeleteAtom
ExitProcess
IsBadWritePtr
GetVersionExA
LocalAlloc
SetLastError
GetFileSize
LocalUnlock
LoadResource
LeaveCriticalSection
TlsGetValue
FreeEnvironmentStringsW
MultiByteToWideChar
FileTimeToSystemTime
GetEnvironmentStringsA
GetEnvironmentVariableA
SetConsoleTextAttribute
FreeLibrary
WritePrivateProfileStringA
FindClose
GlobalAlloc
GlobalHandle
SystemTimeToTzSpecificLocalTime
InitializeSListHead
WriteFile
UnhandledExceptionFilter
GetVolumeInformationA
SetCurrentDirectoryA
GetStringTypeA
GetStdHandle
GetProcAddress
SetFileAttributesA
lstrcmpiA
GetThreadLocale
LocalFree
ReadFile
LockFile
GetLastError
GlobalFindAtomA
CreateFileA
FlushInstructionCache
HeapFree
DuplicateHandle
FindResourceA
GetFileAttributesA
SetErrorMode
CompareStringA
GlobalFree
UnlockFile
GetModuleFileNameA
SetFilePointer
lstrcatA
SetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetSystemDirectoryA
HeapCreate
TlsAlloc
LCMapStringA
InterlockedIncrement
InitializeCriticalSection
TlsFree
LoadLibraryA
lstrcpynA
GlobalLock
SetEnvironmentVariableA

winmm

mixerOpen
mmioAdvance
waveOutGetPitch
timeGetSystemTime

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

001c95a0a68924a4ddb79212b57a983b

Headers

File Characteristics

Imports

user32

gdi32

advapi32

comdlg32

kernel32

winmm

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 2KB