a044cf60215282c08525d0b719d68b4ad7e0b6be04cfd8767ba406fc1f80f601

Sharing

Copy URL

Twitter E-mail

General

Target

a044cf60215282c08525d0b719d68b4ad7e0b6be04cfd8767ba406fc1f80f601
Size

487KB
MD5

36761cf97dd61e3f8efe8f71adf04816
SHA1

ab88b22baaeaab96a7379db69287ef903f8d4177
SHA256

a044cf60215282c08525d0b719d68b4ad7e0b6be04cfd8767ba406fc1f80f601
SHA512

7f530c504225e9d6f7352eabf84efdd32af4b541f2d9d01b4768ab423abbe128b0a8a7087174bbbcc5f78dbc971f2cba8aac5497ec81bd15a63d5773a9ad16a4
SSDEEP

12288:1LP06u9j98Ac+lC3PtJnaK3pRYpiUmP+rHeBxLN:djGPlstpaEpRAippB

Score

N/A

Malware Config

Signatures

Files

a044cf60215282c08525d0b719d68b4ad7e0b6be04cfd8767ba406fc1f80f601
.exe windows x86

bd5a411e9c01c3c2d17a0d1d6477421d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
ReplaceTextA
GetFileTitleA
GetFileTitleW

kernel32

TlsGetValue
SetConsoleCtrlHandler
UnhandledExceptionFilter
ExitProcess
HeapCreate
GetModuleFileNameW
GetStartupInfoA
GetStdHandle
ReadFile
GetStringTypeA
IsValidCodePage
WriteConsoleW
InterlockedExchange
RemoveDirectoryW
GetLocalTime
GetModuleHandleA
GetCommandLineA
GetLocaleInfoA
MultiByteToWideChar
EnumSystemLocalesA
InterlockedIncrement
VirtualAlloc
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
TerminateThread
InterlockedDecrement
GetTickCount
TlsFree
CompareStringW
HeapReAlloc
EnumResourceTypesW
WriteFile
GetCommandLineW
GetTimeZoneInformation
EnumCalendarInfoA
GetModuleHandleW
VirtualQuery
DeleteCriticalSection
SetStdHandle
GetProcAddress
OpenMutexA
WriteConsoleA
CloseHandle
HeapDestroy
Sleep
HeapFree
GetModuleFileNameA
CreateMutexA
GetOEMCP
CreateEventW
HeapAlloc
GetConsoleCP
TlsSetValue
GetDateFormatA
GetFileType
GetACP
TlsAlloc
LeaveCriticalSection
GetLocaleInfoW
SetHandleCount
DeleteFiber
GetTimeFormatA
EnterCriticalSection
GetPrivateProfileIntW
LCMapStringA
LCMapStringW
RtlUnwind
VirtualFree
IsValidLocale
GetCurrentProcessId
GetStringTypeW
GetConsoleMode
FlushFileBuffers
GetUserDefaultLCID
SetUnhandledExceptionFilter
SetLastError
SetFileAttributesW
GetCurrentThread
TerminateProcess
SetFilePointer
CompareStringA
CreateFileA
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
FreeLibrary
GetCurrentProcess
GetLastError
GetCPInfo
GetEnvironmentStringsW
GetConsoleOutputCP
HeapSize
IsDebuggerPresent
WideCharToMultiByte
LoadLibraryA
SetEnvironmentVariableA
SetConsoleActiveScreenBuffer
LockFileEx
QueryPerformanceCounter
GetCurrentThreadId

wininet

SetUrlCacheEntryInfoA

comctl32

InitCommonControlsEx

user32

EditWndProc
GetClipboardData
DialogBoxIndirectParamW
ChangeClipboardChain
OemToCharA
SetMenuItemInfoA
TrackPopupMenuEx
RegisterClassA
CharLowerBuffW
DrawTextExW
SetShellWindow
ReuseDDElParam
CreateAcceleratorTableW
GetKeyboardType
SetFocus
WaitForInputIdle
IsWindowVisible
SetProcessDefaultLayout
EnumPropsW
LoadBitmapA
GetMenu
IsDlgButtonChecked
RegisterClassExA
DdePostAdvise
EnumClipboardFormats
SendNotifyMessageW

shell32

SHQueryRecycleBinA
FindExecutableW

Sections

.text
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd5a411e9c01c3c2d17a0d1d6477421d

Headers

File Characteristics

Imports

comdlg32

kernel32

wininet

comctl32

user32

shell32

Sections

.text Size: 310KB - Virtual size: 310KB

.rdata Size: 57KB - Virtual size: 76KB

.data Size: 106KB - Virtual size: 105KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 310KB - Virtual size: 310KB

.rdata
Size: 57KB - Virtual size: 76KB

.data
Size: 106KB - Virtual size: 105KB

.rsrc
Size: 12KB - Virtual size: 12KB