446abe69a558d4883ce68fd943fb0bff24c0439287719f090f4ad82f42d71111

Sharing

Copy URL

Twitter E-mail

General

Target

446abe69a558d4883ce68fd943fb0bff24c0439287719f090f4ad82f42d71111
Size

45KB
MD5

39653f7eb6a0a73ef6c7bfcc3cb4b08b
SHA1

851d29b7637c9a224e9961235420f4749d8f4a3d
SHA256

446abe69a558d4883ce68fd943fb0bff24c0439287719f090f4ad82f42d71111
SHA512

545e529e0de0b5ac9314c40d9d08f84c2785992c9861e5a8d042d3d6ccd374a1fb780264216c863e1789b6bb94c447c8235c00308ad057aa38bfdf92c812eee4
SSDEEP

768:lyzvHP7sNY563oe84lOXMy/JS6iccG6MoJy:wvHPYeINPy/JRiBMoE

Score

N/A

Malware Config

Signatures

Files

446abe69a558d4883ce68fd943fb0bff24c0439287719f090f4ad82f42d71111
.exe windows x86

49e0c2b025166904b9bebe0b9a48a354

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetPath
SelectObject

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdiplusShutdown
GdiplusStartup

user32

OpenClipboard
MessageBoxIndirectA
MessageBoxA
MapVirtualKeyA
IsClipboardFormatAvailable
GetWindowTextA
GetWindowRect
GetMessageA
RegisterHotKey
GetKeyState
GetKeyNameTextA
GetForegroundWindow
GetDC
GetClipboardData
GetClassNameA
EnumChildWindows
CloseClipboard
CallNextHookEx
ReleaseDC
SendMessageA
SetWindowsHookExA
ToAscii
UnhookWindowsHookEx
GetKeyboardState

kernel32

ExitProcess
GetFileSize
lstrlenA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
WideCharToMultiByte
TerminateProcess
Sleep
RtlZeroMemory
RtlMoveMemory
ReleaseMutex
Process32Next
Process32First
OpenProcess
OpenMutexA
MultiByteToWideChar
LeaveCriticalSection
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
CloseHandle
CreateDirectoryA
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ReadFile
ExpandEnvironmentStringsA
FindFirstFileA
GetCurrentProcess
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetTickCount
GetTimeFormatA
GlobalAlloc
GlobalFree
GlobalLock

advapi32

GetUserNameA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

wininet

InternetCloseHandle
InternetConnectA
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA

shell32

ShellExecuteA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

49e0c2b025166904b9bebe0b9a48a354

Headers

File Characteristics

Imports

ole32

gdi32

gdiplus

user32

kernel32

advapi32

wininet

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 31KB - Virtual size: 30KB