e4352108f15d8fb632745a81f39f94e790e256d1c6af5c6656385680a3903061

Sharing

Copy URL Twitter E-mail

General

Target

e4352108f15d8fb632745a81f39f94e790e256d1c6af5c6656385680a3903061
Size

908KB
MD5

e8df8154c5d75e802916fdc9de2484db
SHA1

39229b683f857090abd3ea87691724306ba5a67f
SHA256

e4352108f15d8fb632745a81f39f94e790e256d1c6af5c6656385680a3903061
SHA512

9471aaf48ce55d9e43dd652895a7caf2de4dc151105f3b78f92099e8336cdbe31e243d3fc1039de6e41257f7999f39440cf7c517d12e3bc8ff1ce9c5d328da49
SSDEEP

12288:9ZJvyKzxE3dtby9LXHiLz9RkbXJIpr4dYRRNT/NVcy3z2EcZMu07fzmC:DJvyK1E33byZAgXMUOR1V3z2rZMvnm

Score

N/A

Malware Config

Signatures

Files

e4352108f15d8fb632745a81f39f94e790e256d1c6af5c6656385680a3903061
.exe windows x86

353bfc28b467ca22940c30fa4701c97d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
HeapFree
CompareStringA
GetLocaleInfoW
CreateNamedPipeA
GetDriveTypeA
GetLocaleInfoA
CreateThread
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
lstrcmpA
SetFilePointer
Sleep
TerminateProcess
HeapAlloc
RaiseException
GetCurrentDirectoryA
VirtualFree
HeapSize
LCMapStringA
IsValidCodePage
GetProcessHeap
GetFileSize
QueryPerformanceCounter
GetStartupInfoA
GetConsoleCP
GetACP
GetModuleHandleW
FindClose
GetCPInfo
GetModuleFileNameA
SetHandleCount
GetTimeZoneInformation
GetSystemTimeAsFileTime
WriteConsoleA
lstrlenA
WideCharToMultiByte
GetVersionExA
GetStringTypeW
ExitThread
TlsSetValue
DeleteFileA
SetStdHandle
LoadLibraryA
LCMapStringW
ResetEvent
GetProcAddress
InterlockedDecrement
GetVersion
HeapCreate
InterlockedIncrement
GetCommandLineA
TlsAlloc
GlobalUnlock
ExitProcess
GetModuleHandleA
GetFileAttributesA
GetOEMCP
lstrcpyA
CloseHandle
WriteFile
GetConsoleMode
EnumSystemLocalesA
LeaveCriticalSection
GlobalAlloc
CreateEventA
GetLastError
CompareStringW
UnhandledExceptionFilter
lstrcpynA
GetFileInformationByHandle
SetLastError
SetConsoleTitleA
SetEnvironmentVariableA
SetThreadPriority
GetTickCount
GlobalLock
TlsFree
ResumeThread
SetEndOfFile
ReadFile
Beep
CreateFileA
GetDiskFreeSpaceExA
FileTimeToSystemTime
GetFileType
GetEnvironmentStrings
InitializeCriticalSection
EnterCriticalSection
FlushFileBuffers
GetCurrentProcess
GetCurrentThread
IsDebuggerPresent
GetFullPathNameA
FreeEnvironmentStringsA
FindFirstFileA
GetEnvironmentStringsW
GetCurrentThreadId
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
GetConsoleOutputCP
GetUserDefaultLCID
WaitForSingleObject
RtlUnwind
GetStdHandle
FileTimeToLocalFileTime
HeapReAlloc
TlsGetValue
IsValidLocale
PeekNamedPipe
GetCurrentProcessId
ConnectNamedPipe
WriteConsoleW
DeviceIoControl
DeleteCriticalSection
FreeEnvironmentStringsW
GetStringTypeA
VirtualAlloc

user32

CheckMenuItem
RegisterClassA
CallWindowProcA
SetCursorPos
GetDlgItemTextA
DialogBoxParamA
GetActiveWindow
MapDialogRect
wsprintfA
EnableMenuItem
SetFocus
ReleaseDC
PostMessageA
GetDlgItem
UpdateWindow
InvalidateRect
MessageBeep
SetClipboardData
GetClassInfoA
DrawTextA
GetClipboardData
SetRect
EndDialog
LoadMenuA
CloseClipboard
SetParent
OpenClipboard
SetWindowLongA
ScreenToClient
IsWindowEnabled
SendMessageA
GetWindowRect
PostQuitMessage
GetParent
KillTimer
GetSysColorBrush
TranslateMessage
IsWindowVisible
EndPaint
GetDlgItemInt
AdjustWindowRect
SetWindowTextA
GetCursorPos
SetCursor
GetWindowTextA
MessageBoxA
FindWindowA
SetTimer
LoadCursorA
ClientToScreen
EmptyClipboard
GetKeyState
RegisterClassExA
CreateWindowExA
BeginPaint
GetDesktopWindow
EnableWindow
GetSubMenu
SetWindowPos
AdjustWindowRectEx
GetForegroundWindow
ShowCursor
GetMessageA
GetDC
DispatchMessageA
GetMessageTime
GetWindowLongA
GetSystemMetrics
GetSysColor
ShowWindow
DestroyWindow
DefWindowProcA
GetClientRect
MoveWindow
GetFocus
LoadIconA

gdi32

GetTextFaceA
DPtoLP
PatBlt
StretchBlt
SetBkMode
StretchDIBits
DeleteObject
CreateBitmap
GetTextMetricsA
SetBitmapBits
SelectObject
CreateFontIndirectA
SetMapMode
SetBkColor
GetObjectA
CreateCompatibleBitmap
SetTextColor
DeleteDC
CreateCompatibleDC
GetStockObject
BitBlt
GetMapMode

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA
ChooseFontA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA

comctl32

ord16
ord17
ord4
ord6

winmm

waveOutWrite
midiOutOpen
midiOutLongMsg
midiOutClose
waveOutReset
waveOutClose
midiOutShortMsg
waveOutGetErrorTextA
waveOutUnprepareHeader
midiOutPrepareHeader
midiOutReset
waveOutOpen
midiOutUnprepareHeader
joyGetPos
waveOutPrepareHeader

wsock32

bind
WSACleanup
connect
closesocket
recv
WSAStartup
htons
socket
ntohs
gethostbyname
accept
htonl
select
setsockopt
listen
ntohl
send

secur32

DeleteSecurityContext

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textes
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

353bfc28b467ca22940c30fa4701c97d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

winmm

wsock32

secur32

Sections

.text Size: 139KB - Virtual size: 139KB

.textes Size: 233KB - Virtual size: 233KB

.rdata Size: 295KB - Virtual size: 295KB

.data Size: 229KB - Virtual size: 2.0MB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 139KB - Virtual size: 139KB

.textes
Size: 233KB - Virtual size: 233KB

.rdata
Size: 295KB - Virtual size: 295KB

.data
Size: 229KB - Virtual size: 2.0MB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 7KB