68d4e08215e704e0f4c64e4797744dde73ad891e1d0814b09b181fb6927e0457

Sharing

Copy URL

Twitter E-mail

General

Target

68d4e08215e704e0f4c64e4797744dde73ad891e1d0814b09b181fb6927e0457
Size

308KB
MD5

089240df40fd02a8f7ca32a70513dfbe
SHA1

7dd044feaa9a781d97d5587d990cec0cb5e55aa1
SHA256

68d4e08215e704e0f4c64e4797744dde73ad891e1d0814b09b181fb6927e0457
SHA512

1544464e7c7888ef64d9d0b24ec2052db182afd63fb4bd972c97cabefb3b9d4f7d2b65e1dc0e1342638a65df54e2ef3869d2406409d5a29c1ec5bfdd88e34736
SSDEEP

6144:ZyII5VhshovMFPtl2OFCDXZo5ikG/HrDVjN/w77nOPu77VgVb83S1GJZ:ushUM52OsvrDVjN/wfnhVgViLZ

Score

N/A

Malware Config

Signatures

Files

68d4e08215e704e0f4c64e4797744dde73ad891e1d0814b09b181fb6927e0457
.exe windows x86

c1d688afdbd17d07d28a575a131c710b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassInfoExA
EnumWindows
CallNextHookEx
GetWindowLongA
DrawTextA
DefWindowProcA
ReleaseDC
GetWindowRect
DialogBoxIndirectParamA
CreatePopupMenu
GetSysColorBrush
DispatchMessageA
GetForegroundWindow
CreateDialogIndirectParamA
GetDesktopWindow
GetClientRect
MapWindowPoints
GetSystemMetrics
DestroyMenu
BeginPaint
EmptyClipboard
InvalidateRect
PostMessageA
ValidateRect
SetDlgItemInt
InsertMenuItemA
SetCursor
GetDlgItemInt

crypt32

CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertCreateCertificateContext
CryptDecodeObject
CertFreeCertificateContext
CertFindCertificateInStore
CertAddEncodedCertificateToStore
CertDeleteCertificateFromStore
CertEnumCertificatesInStore
CryptEncodeObject
CryptHashCertificate
CertFreeCertificateChain

kernel32

LCMapStringW
LCMapStringA
HeapSize
ReadFile
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetTimeFormatA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
CreateFileA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetSystemTimeAsFileTime
ExitProcess
GetSystemInfo
SetTapePosition
VirtualProtect
GetModuleHandleA
GetCommandLineA
GetVersionExA
GetLastError
WriteFile
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapFree
CloseHandle
GetProcAddress
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
SetStdHandle
InitializeCriticalSection
HeapAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualAlloc
MultiByteToWideChar
HeapReAlloc
IsBadWritePtr

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c1d688afdbd17d07d28a575a131c710b

Headers

File Characteristics

Imports

user32

crypt32

kernel32

Sections

.text Size: 72KB - Virtual size: 69KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 140KB - Virtual size: 188KB

.text
Size: 72KB - Virtual size: 69KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 140KB - Virtual size: 188KB