a86daf08a84a161a44d4daa3dc3cbc1a7fdf738ca6f260e48e6de90bca6208ff

Sharing

Copy URL Twitter E-mail

General

Target

a86daf08a84a161a44d4daa3dc3cbc1a7fdf738ca6f260e48e6de90bca6208ff
Size

73KB
MD5

0f0e62bedf21c270a9c0f8c270055e04
SHA1

722aa9a9e5052f809e4919815601a77a9a6e68dd
SHA256

a86daf08a84a161a44d4daa3dc3cbc1a7fdf738ca6f260e48e6de90bca6208ff
SHA512

fcbf0b83db0994d0edf54ba33b3d532b87f9992fc27a9c21042cd346620781b56d6b3c6f29f492860c37e4c9d6e7f85fe74051ad49529dfff3f448859f2741a3
SSDEEP

768:ozKTKFCy7AIPef2ZOqLGbKOljjR8UG5pncxlgzLJNx4Z:ozKTKcsAIWfQLLWjjKFmWLJNx8

Score

N/A

Malware Config

Signatures

Files

a86daf08a84a161a44d4daa3dc3cbc1a7fdf738ca6f260e48e6de90bca6208ff
.exe windows x86

f5e1b300d7165dbb828fd0c77ddf33d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalReAlloc
VirtualQueryEx
TlsGetValue
SetNamedPipeHandleState
EnumResourceNamesW
DeleteCriticalSection
SetProcessAffinityMask
GetCurrentProcessId
FillConsoleOutputCharacterA
TryEnterCriticalSection
DeleteFiber
FlushConsoleInputBuffer
ScrollConsoleScreenBufferA
GetFileAttributesExA
SystemTimeToFileTime
GetDiskFreeSpaceExA
ReleaseSemaphore
GetLongPathNameA
FlushFileBuffers
EnumResourceNamesA
SetEnvironmentVariableA
lstrcmpiA
GetStartupInfoA
SetCommMask
SetErrorMode
GetTapeStatus
GetLocaleInfoW
ReadConsoleA
SetConsoleWindowInfo
SetFileTime
GetHandleInformation
VirtualAllocEx
FindFirstFileW
SetConsoleTitleA
CreateFileW
UnhandledExceptionFilter
GetSystemDirectoryW
GlobalReAlloc
GetFullPathNameA
ReadFileScatter
OutputDebugStringA
GetACP
CompareStringA
EnumSystemCodePagesW
CreateDirectoryExA
FindFirstFileExW
CreateMutexW
FileTimeToLocalFileTime
WritePrivateProfileStructA
DuplicateHandle
GetProcessTimes
InitializeCriticalSection
MultiByteToWideChar
GetModuleHandleA
GlobalFlags
GetSystemInfo
_hread
lstrcmpA
LocalLock
WritePrivateProfileSectionW
GetTickCount
GetDriveTypeA
SetEndOfFile
GetSystemDefaultLangID
GetFileAttributesA
SetCurrentDirectoryA
GetSystemTimeAsFileTime
SetVolumeLabelA
LoadLibraryExA
GetWindowsDirectoryA
LeaveCriticalSection
ReleaseMutex
FreeResource
GetCPInfo
CreateDirectoryW
GetVersion
UnmapViewOfFile
LoadLibraryExW
VirtualFree
FreeEnvironmentStringsA
SetConsoleActiveScreenBuffer
GetCommandLineA
VirtualAlloc
FreeLibraryAndExitThread
ExitProcess

user32

AdjustWindowRectEx
GetUpdateRect
SetDlgItemInt
UnregisterClassA
GetWindowTextA
GetNextDlgGroupItem
SwapMouseButton
CreateAcceleratorTableW
GetLastActivePopup
GetClipboardFormatNameA
SetSysColors
IsRectEmpty
CreateMDIWindowW
SetWindowsHookExW
GetUserObjectSecurity
PostThreadMessageA
RegisterHotKey
ScrollDC
CreateDialogParamA
GetMenuItemRect
AttachThreadInput
GetWindowDC
InvertRect
FrameRect
ShowWindow
LoadIconA
MsgWaitForMultipleObjects
GetDlgItemTextA
GetThreadDesktop
DialogBoxParamW
GetTabbedTextExtentW
SystemParametersInfoA
SetRectEmpty
SetLastErrorEx
SetWinEventHook
GetMenuItemCount
GetWindowPlacement
SetWindowRgn
OpenWindowStationW
SetClipboardViewer
ValidateRect
LoadMenuA
LoadCursorFromFileW
CreateWindowStationW
SetPropW

gdi32

GetEnhMetaFileDescriptionA
EnumFontsA
ExtCreateRegion
LPtoDP
GetBitmapBits
EnumFontFamiliesExA
GetViewportExtEx
GetTextExtentExPointA
GetPolyFillMode
PlayEnhMetaFileRecord
CreateICW
GetCharacterPlacementA
CreateDCA
Polyline
CreateDCW
GetCharWidth32A
GetCurrentObject
CreateFontIndirectA
SetWindowOrgEx
EnumFontsW
ResizePalette

advapi32

AbortSystemShutdownW
RegDeleteKeyW
CryptGetKeyParam
EnumDependentServicesW
CryptGenKey
GetServiceKeyNameW
DeregisterEventSource
CryptGetHashParam
IsValidSid
InitializeAcl
DuplicateTokenEx
CryptGetUserKey
CryptDeriveKey
QueryServiceConfigW
StartServiceCtrlDispatcherW
GetAclInformation
RegCreateKeyExW
RegCreateKeyA
GetSecurityDescriptorLength
ChangeServiceConfigW
RegSetValueW
OpenThreadToken
RegEnumKeyExA
CreatePrivateObjectSecurity
RegQueryInfoKeyA
GetNamedSecurityInfoA
RegSaveKeyW
RegOpenKeyW
LookupPrivilegeDisplayNameA
LogonUserA
GetTokenInformation
SetSecurityDescriptorSacl
BuildSecurityDescriptorW
SetSecurityDescriptorGroup
RegOpenKeyExA
ObjectCloseAuditAlarmW
RegDeleteValueW
CryptVerifySignatureA
RegDeleteKeyA

shell32

DragQueryPoint
DragFinish

ole32

MkParseDisplayName
CoRegisterClassObject
OleCreateFromData
OleCreateLink
ReadFmtUserTypeStg
CoCreateInstanceEx
OleSetMenuDescriptor
CoLockObjectExternal

comctl32

ImageList_DragShowNolock
CreateToolbarEx
ImageList_GetIcon

shlwapi

PathIsRootW
UrlGetPartA
PathQuoteSpacesW
SHRegGetBoolUSValueA
PathRenameExtensionW
SHOpenRegStream2W
SHGetValueA
UrlApplySchemeW
PathAddExtensionW

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 288KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f5e1b300d7165dbb828fd0c77ddf33d0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

shlwapi

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 288KB - Virtual size: 284KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 288KB - Virtual size: 284KB