905d004b0c5ce0acf8cece616e1e61c31ee2fb0b0279387e1036b0c0143f13fa

Sharing

Copy URL Twitter E-mail

General

Target

905d004b0c5ce0acf8cece616e1e61c31ee2fb0b0279387e1036b0c0143f13fa
Size

808KB
MD5

045a3f6ca4d6bfcba47bb0a4bf54edb0
SHA1

e86c62f1ba956a2fdf502b5f204d60f5b41b5227
SHA256

905d004b0c5ce0acf8cece616e1e61c31ee2fb0b0279387e1036b0c0143f13fa
SHA512

fb3cf20a2560244dcf424198dfbe6544c66a2464a61ffb9d7cc82f4592b351e459c2cfa9b866b42cfe22fd5deb8ba8afbc84d670ad2e643e76d26676e2b046b9
SSDEEP

24576:JWR3W3XaRuOOdkodC59+UABbWVvMJmAtpK2ITDk:J+3mROOiKrUlItrgDk

Score

N/A

Malware Config

Signatures

Files

905d004b0c5ce0acf8cece616e1e61c31ee2fb0b0279387e1036b0c0143f13fa
.exe windows x86

f08f03e3e5f587050dc96efe8d1446ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

WindowFromPoint
FreeDDElParam
TranslateMessage
GetClipboardFormatNameA
LoadMenuA
GetWindowWord
DrawTextW
DefWindowProcA
MessageBoxW
DeleteMenu
SendNotifyMessageW
CallMsgFilter
DefDlgProcA
GetIconInfo
SetCursorPos
CreateWindowExA
ShowWindow
RegisterClassA
SetWindowPlacement
RegisterClassExA
PostMessageW
SetRect
IsWindow
AppendMenuA
RealGetWindowClass
DdeConnect
CreateWindowExW
LoadImageW
UpdateWindow
LoadCursorFromFileA
VkKeyScanA
LoadBitmapW
DestroyWindow

advapi32

LookupAccountNameW
RegSetKeySecurity
RegCreateKeyExA
AbortSystemShutdownW
CryptGetDefaultProviderW
RegQueryValueW
RegSetValueExW
CryptDuplicateHash
RegDeleteValueW
CryptSetProviderExA
RegEnumKeyExW
LookupPrivilegeNameW
LookupPrivilegeValueA
CryptDestroyKey
LookupAccountSidW
CryptSetProviderA
RegLoadKeyA
LookupAccountNameA
InitializeSecurityDescriptor
CryptImportKey
CreateServiceA
CryptDestroyHash

kernel32

WriteFileEx
SuspendThread
VirtualAlloc
ExitThread
OpenMutexA
GetThreadSelectorEntry
GetCommandLineA
GetTickCount
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
InitializeCriticalSection
SetHandleCount
FreeEnvironmentStringsW
GetTempPathW
CreateEventW
GetSystemTimeAsFileTime
HeapFree
GetEnvironmentStrings
ReadFileEx
HeapDestroy
ExitProcess
RtlUnwind
LoadLibraryA
GetWindowsDirectoryW
GetLocaleInfoA
SetLastError
SetFilePointer
CompareStringA
GetPrivateProfileSectionNamesA
QueryPerformanceCounter
TlsGetValue
MultiByteToWideChar
VirtualFree
GetVersionExA
lstrcat
GlobalAlloc
CompareStringW
GetThreadPriorityBoost
UnhandledExceptionFilter
FindResourceExW
EnumSystemLocalesA
EnterCriticalSection
GetSystemDefaultLCID
HeapReAlloc
HeapCreate
FreeEnvironmentStringsA
EnumResourceNamesW
GetStringTypeA
GetModuleHandleA
GetProcAddress
GetLastError
IsValidLocale
DeleteCriticalSection
CreateMailslotW
GetLongPathNameA
InterlockedExchange
GetModuleFileNameW
GetConsoleMode
IsValidCodePage
CreateProcessW
TlsFree
FileTimeToLocalFileTime
ContinueDebugEvent
GetCPInfo
GetDateFormatA
VirtualQuery
GetStringTypeW
GetPrivateProfileSectionW
GetCurrentProcess
GetShortPathNameW
GetVolumeInformationW
GetOEMCP
WideCharToMultiByte
GetProfileStringA
WriteFile
HeapSize
GetFileType
GetStdHandle
CreateFileMappingA
WriteProfileSectionW
GetUserDefaultLCID
GetLocaleInfoW
GetConsoleTitleW
GetPrivateProfileSectionNamesW
lstrcpyW
lstrlenA
GetCommandLineW
FlushFileBuffers
HeapAlloc
GetCurrencyFormatA
GetStartupInfoW
TlsAlloc
GetSystemInfo
GetCurrentThread
TerminateProcess
WaitForMultipleObjects
GetEnvironmentStringsW
GetNumberFormatA
VirtualProtect
CreateMutexA
GetCurrentThreadId
CreateRemoteThread
IsBadWritePtr
TlsSetValue
LeaveCriticalSection
GetTimeZoneInformation
lstrcatW
CloseHandle
ReleaseSemaphore
GetTimeFormatA
GetStartupInfoA
EnumSystemLocalesW
ReadConsoleInputA
GetCurrentProcessId
DebugBreak
EnumTimeFormatsA
ReadFile
SetStdHandle
GetAtomNameW
FormatMessageW
GetACP
GetModuleFileNameA

comctl32

InitCommonControlsEx
ImageList_DragEnter
CreateStatusWindowW
ImageList_LoadImageW
ImageList_SetOverlayImage
DrawStatusText
ImageList_Copy
ImageList_SetFlags
ImageList_SetBkColor
CreateStatusWindowA

gdi32

CombineTransform
UpdateICMRegKeyA
ScaleViewportExtEx
SetPolyFillMode
CreateFontIndirectW
SetDIBitsToDevice
ModifyWorldTransform
PathToRegion
AngleArc
Escape
SetStretchBltMode
GetCharABCWidthsFloatW
OffsetRgn
CreatePenIndirect
AnimatePalette
GetNearestColor
SetMetaFileBitsEx
SetMapperFlags
CreateFontIndirectA
GetOutlineTextMetricsA
SetTextAlign
CheckColorsInGamut
StretchDIBits
GetTextExtentPoint32A
GetEnhMetaFileHeader

Sections

.text
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f08f03e3e5f587050dc96efe8d1446ad

Headers

File Characteristics

Imports

user32

advapi32

kernel32

comctl32

gdi32

Sections

.text Size: 216KB - Virtual size: 213KB

.rdata Size: 400KB - Virtual size: 397KB

.data Size: 144KB - Virtual size: 166KB

.rsrc Size: 44KB - Virtual size: 41KB

.text
Size: 216KB - Virtual size: 213KB

.rdata
Size: 400KB - Virtual size: 397KB

.data
Size: 144KB - Virtual size: 166KB

.rsrc
Size: 44KB - Virtual size: 41KB