142d72e53200e3294239911a4a644f0922e11f2bf3fb975c86b128f67dc4b016

Sharing

Copy URL

Twitter E-mail

General

Target

142d72e53200e3294239911a4a644f0922e11f2bf3fb975c86b128f67dc4b016
Size

254KB
MD5

b92f249743a47840e6df7f152bd60ae7
SHA1

041e0782762b12c2944ecf2df086b393a7bd2ae1
SHA256

142d72e53200e3294239911a4a644f0922e11f2bf3fb975c86b128f67dc4b016
SHA512

288ca21a08bb5e6f8b9eeeb4f4e9483a2b1c589e1752fef3efec7cbd2dfc65837913e0837bc6d59929e85fadf57b5a0bcf44718f41285e3a9499f2b5463851cd
SSDEEP

6144:cE0t0xJb4FswdLH0CVDMq0RvciyJ7JPQ9Fd7KUZyAO:R4O6D0CVD/0dciyJ7JPQ9vKUZyAO

Score

N/A

Malware Config

Signatures

Files

142d72e53200e3294239911a4a644f0922e11f2bf3fb975c86b128f67dc4b016
.exe windows x86

71d789f797db2ac1495fcd38f966d298

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntW

kernel32

LoadLibraryExA
OpenFile
GetOverlappedResult
GetSystemDirectoryW
WaitForMultipleObjectsEx
LocalReAlloc
SetThreadAffinityMask
FindNextFileA
GlobalFindAtomW
FindResourceExW
GetModuleHandleA
GetOEMCP
EnumResourceNamesA
GlobalReAlloc
FindNextFileW
EnumResourceTypesA
IsDBCSLeadByteEx
DeleteFileA
LoadLibraryA
CloseHandle
GetFileAttributesExA
DefineDosDeviceW
TransactNamedPipe
LocalFree
FileTimeToDosDateTime
lstrlenA
CopyFileA
GetSystemWindowsDirectoryA
CreateEventW
GetCommandLineW
SetHandleInformation
SearchPathA
SetLastError
SetFilePointer
ResetEvent
RemoveDirectoryW
SetCurrentDirectoryW
lstrcpyW
QueryDosDeviceW
Sleep
LCMapStringA
GetStringTypeExW
FindFirstFileW
GetCurrentThread
GetFullPathNameW
GlobalHandle
GetFileType
IsBadReadPtr
GetSystemDirectoryA
GetDateFormatA
SearchPathW
lstrcmpW

comdlg32

GetFileTitleW
GetSaveFileNameW
FindTextW
ChooseColorW
GetSaveFileNameA
CommDlgExtendedError

user32

DestroyAcceleratorTable
ActivateKeyboardLayout
IsDialogMessageA
TranslateAcceleratorA
LockWindowUpdate
CreateIconIndirect
DestroyMenu
DefWindowProcA
VkKeyScanW
GetKeyboardLayoutNameW
GetDlgCtrlID
SendNotifyMessageW
RegisterClassExA
SystemParametersInfoW
SetWindowTextA
GetClassInfoExW
RemovePropW
SetMenuItemInfoW
DestroyCaret
TrackPopupMenu
OpenInputDesktop
DragObject
EqualRect
CheckMenuRadioItem
UpdateWindow
InsertMenuW
DeferWindowPos
IsWindowVisible
BringWindowToTop
DrawFocusRect
GetMenuStringW
InSendMessage
mouse_event
GetScrollRange
ArrangeIconicWindows
CharNextW
CascadeWindows
FindWindowA
InsertMenuItemW
LoadIconW
wsprintfW
RegisterClassW
LoadAcceleratorsW
GetDoubleClickTime
WaitForInputIdle
IsWindowEnabled
MapDialogRect
ShowOwnedPopups
CreateWindowExW
CharNextExA
CreateDialogParamA
RegisterClassA
IsMenu
SetWindowLongW
GetLastActivePopup
GetWindowTextLengthW
GetKeyState
DrawTextExW
GetClientRect
WaitMessage
WindowFromPoint
CharLowerA
CharLowerW
LookupIconIdFromDirectory
DeleteMenu
GetSystemMenu
IsIconic
GetWindowPlacement
GetDC
CreateWindowExA
EnumThreadWindows
SetScrollPos
ChildWindowFromPoint
DispatchMessageW
DrawAnimatedRects
GetMenuItemCount
CharPrevA
MoveWindow
MapWindowPoints
GetShellWindow
ValidateRect
MessageBoxW
DefFrameProcA
ModifyMenuW
LoadImageW
GetUpdateRgn
ScreenToClient
GetParent
KillTimer
SetCaretPos
IntersectRect
PostQuitMessage
SendMessageTimeoutW
DrawEdge
SetSysColors
ClipCursor
DrawTextW
HideCaret
ChangeMenuW
FrameRect
InsertMenuA
GetSystemMetrics
FindWindowExW
GetMenuState
GetDlgItemTextW
SendDlgItemMessageA
ShowCaret
EndDialog
UnionRect
PostMessageA
PeekMessageA
OemToCharA
AllowSetForegroundWindow
HiliteMenuItem
FindWindowW
ChildWindowFromPointEx
ReplyMessage

comctl32

ImageList_GetIcon
ImageList_Destroy
ImageList_Remove
InitCommonControlsEx
PropertySheetA
ImageList_Draw

msvcrt

_controlfp
floor
isprint
__set_app_type
fseek
isalnum
strncpy
isxdigit
__p__fmode
__p__commode
wcscmp
wcsncmp
wcscpy
iswctype
towupper
ungetc
free
_amsg_exit
strcoll
puts
iswxdigit
printf
strstr
wcstok
strspn
vswprintf
_initterm
iswprint
_ismbblead
_XcptFilter
wcschr
bsearch
_exit
setlocale
srand
wcsstr
strerror
qsort
getc
_cexit
remove
realloc
__setusermatherr
__getmainargs
strtoul
setvbuf
localtime

Exports

Exports

?GetShiftAltInfo@@YGK_KHE:O

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bit
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.insec
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.inmin
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wall
Size: 512B - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71d789f797db2ac1495fcd38f966d298

Headers

File Characteristics

Imports

shlwapi

kernel32

comdlg32

user32

comctl32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.bit Size: 1KB - Virtual size: 1KB

.insec Size: 6KB - Virtual size: 5KB

.inmin Size: 512B - Virtual size: 86B

.wall Size: 512B - Virtual size: 186KB

.zdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 221KB - Virtual size: 220KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.bit
Size: 1KB - Virtual size: 1KB

.insec
Size: 6KB - Virtual size: 5KB

.inmin
Size: 512B - Virtual size: 86B

.wall
Size: 512B - Virtual size: 186KB

.zdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 221KB - Virtual size: 220KB

.reloc
Size: 1KB - Virtual size: 1KB