3bae3c95cef740c018b84703050b676d7c5b041dd7a7fa73aad22a3254081555

Sharing

Copy URL Twitter E-mail

General

Target

3bae3c95cef740c018b84703050b676d7c5b041dd7a7fa73aad22a3254081555
Size

101KB
MD5

ae9757965a39479135c794488d9f736e
SHA1

b3c4d610cbf0737ac4b98e39f315b90c9bb0160f
SHA256

3bae3c95cef740c018b84703050b676d7c5b041dd7a7fa73aad22a3254081555
SHA512

0222c99379e941b153da5a05626a2d6f0ab4afb250586a58120ee984dbe57ce22b9bb0de9d559e0ef60be12a1f564c7f5a84f640236aebac6920a869a2f0d285
SSDEEP

1536:iZ/wUgaDWbeeLMrSVAF/bCFGIdxLcNQYvhCwBxbG1gJKu9T0FRjqT5BWB12O:c/wHWWxLMrS8/bWZcrY89D9wFR2T5A2

Score

N/A

Malware Config

Signatures

Files

3bae3c95cef740c018b84703050b676d7c5b041dd7a7fa73aad22a3254081555
.exe windows x86

40f87545ba93f1fa035f94562ef26611

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
IsBadReadPtr
GetCPInfo
GetSystemTimeAsFileTime
GetLastError
GetProcAddress
LocalReAlloc
FormatMessageW
GetSystemDefaultLangID
lstrcpyW
OutputDebugStringA
GetTickCount
LoadLibraryW
RemoveDirectoryA
GetEnvironmentStringsW
GlobalAlloc
InterlockedDecrement
GetComputerNameW
OutputDebugStringW
FileTimeToSystemTime
GetModuleFileNameW
GetStartupInfoA
InitializeCriticalSection
InterlockedIncrement
WideCharToMultiByte
SetLastError
LocalFree
CloseHandle
QueryPerformanceCounter
CreateFileW
GlobalFree
lstrcmpiW
GetModuleHandleA
GetDateFormatW
DeleteCriticalSection
lstrlenW
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
GetSystemWindowsDirectoryW
GlobalLock
GlobalUnlock

msvcrt

wcscat
wcscpy
_except_handler3
??3@YAXPAX@Z
_initterm
wcstoul
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_adjust_fdiv
wcsrchr
vswprintf
free
wcschr
mbstowcs
memmove
wcscmp
??2@YAPAXI@Z
_wcsupr
malloc
_wcsicmp
wcsstr
wcslen
__dllonexit
_onexit
__RTDynamicCast

user32

EndDialog
ReleaseDC
MessageBoxW
PostMessageW
DialogBoxParamW
EnableWindow
GetWindowLongW
SetWindowLongW
GetDC
SendDlgItemMessageW
LoadCursorW
LoadIconW
LoadBitmapW
GetDlgItemTextA
InsertMenuItemW
LoadImageW
WinHelpW
SetCursor
GetDlgItem
wsprintfW
SetWindowTextW
GetParent
LoadStringW
RegisterClipboardFormatW
SystemParametersInfoW
SetDlgItemTextW
SendMessageW
SetFocus

certcli

CAGetCertTypePropertyEx
CAFindCertTypeByName
CAEnumNextCertType
CAUpdateCA
CAFreeCAProperty
CAFindByName
CACloseCertType
CASetCertTypeProperty
CACertTypeSetSecurity
CACertTypeGetSecurity
CAEnumCertTypesForCA
CAFreeCertTypeExtensions
CACreateCertType
CAGetCAProperty
CARemoveCACertificateType
CASetCertTypeKeySpec
CASetCertTypeFlags
CASetCertTypeExtension
CAAddCACertificateType
CAGetCertTypeExtensions
CAUpdateCertType
CAGetCertTypeFlags
CAGetCertTypeKeySpec
CACloseCA
CAFreeCertTypeProperty
CAEnumCertTypes
CAGetCertTypeProperty

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40f87545ba93f1fa035f94562ef26611

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

certcli

advapi32

comctl32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 90KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 90KB

.rsrc
Size: 23KB - Virtual size: 23KB