1d92204baffbf8402b3e097ddbef0d8564a743a219fd69409a56f42ba14a9bef

Sharing

Copy URL Twitter E-mail

General

Target

1d92204baffbf8402b3e097ddbef0d8564a743a219fd69409a56f42ba14a9bef
Size

195KB
MD5

11cf3528aef8a957bd87e430656c2f30
SHA1

0df9116e290a5985f357dcdc0f47972b6839e572
SHA256

1d92204baffbf8402b3e097ddbef0d8564a743a219fd69409a56f42ba14a9bef
SHA512

bb6415508587cd9c9ea060aabd8637a272be64b48131218b7d5997fc7fc2390d1404d236c47375559ab4dc265cb01d1c18e084c928908f914bfcc74b9d1c772f
SSDEEP

6144:e+MOjf0xmFxcvhKGE/msKcAJYirvbp/uuW0nIgUgMRIVi2:o0Fo639iHRlnIHPmVi2

Score

N/A

Malware Config

Signatures

Files

1d92204baffbf8402b3e097ddbef0d8564a743a219fd69409a56f42ba14a9bef
.exe windows x86

3de82d459154e22900303769828dd3b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW
GetDlgItemTextA
ReleaseDC
SetWindowTextW
LoadCursorW
EnableWindow
GetWindowLongW
SetDlgItemTextW
EndDialog
SetWindowLongW
LoadIconW
wsprintfW
SetFocus
GetDlgItem
RegisterClipboardFormatW
LoadImageW
SendMessageW
DialogBoxParamW
LoadStringW
LoadBitmapW
GetDC
SendDlgItemMessageW
PostMessageW
WinHelpW
GetParent
MessageBoxW
SetCursor
InsertMenuItemW

msvcrt

wcsstr
wcsrchr
_wcsupr
wcschr
_adjust_fdiv
wcscmp
vswprintf
_purecall
wcscpy
_initterm
wcstoul
free
wcslen
??2@YAPAXI@Z
_wcsicmp
malloc
_onexit
_except_handler3
__RTDynamicCast
__dllonexit
wcscat
?terminate@@YAXXZ
mbstowcs
??1type_info@@UAE@XZ
??3@YAXPAX@Z
memmove

certcli

CARemoveCACertificateType
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CACertTypeGetSecurity
CASetCertTypeProperty
CAGetCertTypeProperty
CAFreeCAProperty
CACreateCertType
CAFreeCertTypeExtensions
CAEnumCertTypesForCA
CAGetCertTypeExtensions
CAAddCACertificateType
CACloseCA
CACloseCertType
CACertTypeSetSecurity
CAUpdateCertType
CAGetCertTypeKeySpec
CAGetCertTypePropertyEx
CAGetCertTypeFlags
CAEnumCertTypes
CASetCertTypeExtension
CASetCertTypeFlags
CAFindByName
CAGetCAProperty
CAUpdateCA
CAFindCertTypeByName
CAEnumNextCertType

kernel32

InterlockedIncrement
RemoveDirectoryA
SetLastError
GlobalUnlock
GlobalAlloc
WideCharToMultiByte
lstrlenW
GetComputerNameW
IsValidCodePage
QueryPerformanceCounter
CreateFileW
lstrcmpiW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetEnvironmentStringsA
GetTickCount
GetModuleHandleA
LocalReAlloc
InitializeCriticalSection
OutputDebugStringW
InterlockedDecrement
GetCPInfo
GetProcAddress
LoadLibraryW
GetCurrentProcess
GetModuleFileNameW
LocalFree
GetStartupInfoA
GetSystemTimeAsFileTime
CloseHandle
OutputDebugStringA
DeleteCriticalSection
GetACP
FormatMessageW
GlobalLock
IsBadReadPtr
GetLastError
GetDateFormatW
GetSystemWindowsDirectoryW
GlobalFree
SetUnhandledExceptionFilter
lstrcpyW

advapi32

RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

comctl32

PropertySheetW
CreatePropertySheetPageW

shell32

ShellExecuteExW
ShellExecuteW

Sections

.code
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3de82d459154e22900303769828dd3b3

Headers

File Characteristics

Imports

user32

msvcrt

certcli

kernel32

advapi32

gdi32

comctl32

shell32

Sections

.code Size: 88KB - Virtual size: 88KB

.rdata Size: 103KB - Virtual size: 2.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.code
Size: 88KB - Virtual size: 88KB

.rdata
Size: 103KB - Virtual size: 2.5MB

.rsrc
Size: 1KB - Virtual size: 1KB