e5148e8d1d3e581d6ae1db6ce7a9f180ea55dc9083fa4bfc7bf53ac47a26fa5f

Sharing

Copy URL

Twitter E-mail

General

Target

e5148e8d1d3e581d6ae1db6ce7a9f180ea55dc9083fa4bfc7bf53ac47a26fa5f
Size

102KB
MD5

e14f45da48ab40cf2b19cc247ae9aaf3
SHA1

5302bbdf0ec83a54e1184f46a7a961e3ec462537
SHA256

e5148e8d1d3e581d6ae1db6ce7a9f180ea55dc9083fa4bfc7bf53ac47a26fa5f
SHA512

19862c9cfb8440fea74abed4d9f61c48a4beb531b74e7ee50cbfd5da357b6fd08442bd7732e3d93a077a6bf958a6c603872c7cd40bf8a471b730075d7c3439c5
SSDEEP

1536:24b0jmrurWHMdqMxavdT5+Ribx+8w97TJ6sBui9RhZFXyHAqzIX5pl:nb6m9GqMx3Rj97TJDBui/hOHA1v

Score

N/A

Malware Config

Signatures

Files

e5148e8d1d3e581d6ae1db6ce7a9f180ea55dc9083fa4bfc7bf53ac47a26fa5f
.exe windows x86

37637fc566f3acf6f8201e57f94f8ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcschr
malloc
memmove
__RTDynamicCast
wcscmp
??1type_info@@UAE@XZ
_adjust_fdiv
vswprintf
wcslen
wcscpy
__dllonexit
?terminate@@YAXXZ
_wcsupr
wcscat
_onexit
_except_handler3
wcstoul
_initterm
_wcsicmp
wcsrchr
??3@YAXPAX@Z
free
mbstowcs
wcsstr
??2@YAPAXI@Z

kernel32

InitializeCriticalSection
GetStartupInfoA
OutputDebugStringW
GetLastError
CreateFileW
lstrlenW
QueryPerformanceCounter
GlobalUnlock
SetLastError
SetUnhandledExceptionFilter
LocalFree
GlobalFree
FileTimeToSystemTime
GlobalAlloc
GetCPInfo
lstrcmpiW
CloseHandle
FileTimeToLocalFileTime
LoadLibraryW
RemoveDirectoryA
WideCharToMultiByte
GetModuleHandleA
GlobalLock
GetSystemWindowsDirectoryW
OutputDebugStringA
GetModuleFileNameW
GetSystemTimeAsFileTime
DeleteCriticalSection
lstrcpyW
InterlockedIncrement
InterlockedDecrement
IsBadReadPtr
GetSystemDefaultLangID
GetDateFormatW
FormatMessageW
GetCurrentProcess
LocalReAlloc
GetEnvironmentStringsW
GetComputerNameW
GetTickCount
GetProcAddress

advapi32

RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW

user32

LoadBitmapW
SetWindowTextW
SetWindowLongW
GetDlgItem
LoadStringW
GetParent
InsertMenuItemW
GetDlgItemTextA
GetDC
LoadCursorW
SetCursor
PostMessageW
SetDlgItemTextW
EnableWindow
EndDialog
SendMessageW
ReleaseDC
LoadImageW
LoadIconW
SetFocus
SendDlgItemMessageW
RegisterClipboardFormatW
WinHelpW
SystemParametersInfoW
GetWindowLongW
wsprintfW
DialogBoxParamW
MessageBoxW

certcli

CAAddCACertificateType
CAFreeCertTypeProperty
CAGetCertTypeKeySpec
CACreateCertType
CASetCertTypeProperty
CAGetCAProperty
CACertTypeGetSecurity
CAGetCertTypeProperty
CACertTypeSetSecurity
CASetCertTypeExtension
CAEnumNextCertType
CAGetCertTypePropertyEx
CAGetCertTypeFlags
CAFreeCertTypeExtensions
CASetCertTypeFlags
CASetCertTypeKeySpec
CAGetCertTypeExtensions
CAUpdateCertType
CAFindByName
CAUpdateCA
CARemoveCACertificateType
CACloseCertType
CAFindCertTypeByName
CAFreeCAProperty
CAEnumCertTypesForCA
CAEnumCertTypes
CACloseCA

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37637fc566f3acf6f8201e57f94f8ebd

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

user32

certcli

comctl32

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 112KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 112KB

.rsrc
Size: 23KB - Virtual size: 23KB