77723a3e5055475b1434e8da4f7190f67da3d11d46b1dbe8f83c02eda841af5a

Sharing

Copy URL Twitter E-mail

General

Target

77723a3e5055475b1434e8da4f7190f67da3d11d46b1dbe8f83c02eda841af5a
Size

101KB
MD5

95ffb1f59d4a69c02701b817760f7ba6
SHA1

fa3b53a8a8671f816fcffffaff9b5045fd1e807d
SHA256

77723a3e5055475b1434e8da4f7190f67da3d11d46b1dbe8f83c02eda841af5a
SHA512

8f03de12e9628d5fdd95b911ca33f5d6620fac900aea48ec3dfe549b7aa1fea6b6978adb7e4ceed57e5d6c2c8920c5d0fa775173c9ab2aa29bc132fb37c96722
SSDEEP

1536:eC7PhLe55pfntaBv5+5y+dkT2asK32f3i1p7kFBR9:rPhLe/pfta3+5/kaN5vi1CFBR

Score

N/A

Malware Config

Signatures

Files

77723a3e5055475b1434e8da4f7190f67da3d11d46b1dbe8f83c02eda841af5a
.exe windows x86

4fc7971786d4207689834e683a18fbc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcstoul
vswprintf
__dllonexit
_onexit
wcschr
wcscmp
memmove
?terminate@@YAXXZ
_wcsupr
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
wcscpy
wcsrchr
__RTDynamicCast
??2@YAPAXI@Z
_wcsicmp
wcscat
malloc
??3@YAXPAX@Z
mbstowcs
_except_handler3
free
wcslen
wcsstr

advapi32

RegQueryValueExW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW

kernel32

GlobalAlloc
GetModuleHandleA
GetSystemWindowsDirectoryW
CloseHandle
IsBadReadPtr
InterlockedDecrement
FileTimeToLocalFileTime
LocalReAlloc
SetLastError
lstrcpyW
LocalFree
InitializeCriticalSection
FileTimeToSystemTime
GetModuleFileNameW
InterlockedIncrement
SetUnhandledExceptionFilter
LoadLibraryW
GetSystemDefaultLangID
OutputDebugStringA
lstrcmpiW
GetProcAddress
GetDateFormatW
CreateFileW
GetLastError
GetStartupInfoA
DeleteCriticalSection
GetComputerNameW
GetCurrentThread
GetEnvironmentStringsW
GlobalUnlock
GetCurrentProcess
OutputDebugStringW
GlobalLock
GlobalFree
GetCPInfo
QueryPerformanceCounter
GetSystemTimeAsFileTime
FormatMessageW
GetTickCount
WideCharToMultiByte
lstrlenW

user32

RegisterClipboardFormatW
ReleaseDC
LoadImageW
GetWindowLongW
GetParent
EndDialog
SetWindowLongW
GetDlgItemTextA
InsertMenuItemW
MessageBoxW
EnableWindow
wsprintfW
LoadIconW
SystemParametersInfoW
WinHelpW
LoadCursorW
SendMessageW
GetDlgItem
SetDlgItemTextW
LoadBitmapW
PostMessageW
DialogBoxParamW
SetFocus
GetDC
LoadStringW
SetWindowTextW
SendDlgItemMessageW
SetCursor

certcli

CAGetCertTypePropertyEx
CAUpdateCA
CACloseCertType
CARemoveCACertificateType
CAGetCAProperty
CAFindByName
CAEnumCertTypes
CAFindCertTypeByName
CAGetCertTypeKeySpec
CAFreeCertTypeProperty
CACreateCertType
CAAddCACertificateType
CACertTypeSetSecurity
CAEnumCertTypesForCA
CACertTypeGetSecurity
CAGetCertTypeProperty
CAFreeCAProperty
CASetCertTypeProperty
CAUpdateCertType
CAGetCertTypeFlags
CAGetCertTypeExtensions
CASetCertTypeKeySpec
CACloseCA
CAEnumNextCertType
CAFreeCertTypeExtensions
CASetCertTypeFlags
CASetCertTypeExtension

comctl32

CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fc7971786d4207689834e683a18fbc5

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

certcli

comctl32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 71KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 71KB

.rsrc
Size: 23KB - Virtual size: 23KB