7513ce4164a375a97548c666616ef9a68e53c7c6460338224e05948d618039c8

Sharing

Copy URL

Twitter E-mail

General

Target

7513ce4164a375a97548c666616ef9a68e53c7c6460338224e05948d618039c8
Size

100KB
MD5

ac0b3c8e2f79e0ca09f749330eb6e809
SHA1

48b11e9a2fe699004f4192648542f7ada48c106e
SHA256

7513ce4164a375a97548c666616ef9a68e53c7c6460338224e05948d618039c8
SHA512

6aa261db042eb69d45dd50c81d0e821793bd1dab9dacc217dd80d3d9e41d07db35bdb513e353c5976ba4de10258cc94ea25d27d947d42f3439dce61f1e6580c9
SSDEEP

1536:vpGfLUJtWtiAdi9itcuowU9vuu2tqbHpYjtR7EGKM6+Nbek4ABVPjLWSnhN:vpGfLYvA4itcuERdbHWTgz+FDPVHWQ

Score

N/A

Malware Config

Signatures

Files

7513ce4164a375a97548c666616ef9a68e53c7c6460338224e05948d618039c8
.exe windows x86

c209b216199e28fbbcf5022e481747a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItem
SetWindowTextW
GetDlgItemTextA
SetWindowLongW
LoadBitmapW
SystemParametersInfoW
SendMessageW
ReleaseDC
SetFocus
SetDlgItemTextW
GetParent
PostMessageW
wsprintfW
LoadIconW
LoadImageW
LoadStringW
EndDialog
RegisterClipboardFormatW
DialogBoxParamW
MessageBoxW
GetDC
EnableWindow
SetCursor
GetWindowLongW
LoadCursorW
SendDlgItemMessageW
InsertMenuItemW
WinHelpW

kernel32

GlobalFree
LoadLibraryW
WideCharToMultiByte
OutputDebugStringA
FormatMessageW
GetModuleHandleA
DeleteCriticalSection
GetSystemTimeAsFileTime
GetDateFormatW
lstrcmpiW
GetStartupInfoA
GlobalLock
SetUnhandledExceptionFilter
FileTimeToSystemTime
LocalFree
LocalReAlloc
CreateFileW
GlobalAlloc
GetLastError
GlobalUnlock
GetSystemDefaultLangID
lstrlenW
GetModuleFileNameW
InterlockedDecrement
FileTimeToLocalFileTime
RemoveDirectoryA
GetSystemWindowsDirectoryW
GetEnvironmentStringsW
OutputDebugStringW
CloseHandle
QueryPerformanceCounter
InterlockedIncrement
GetTickCount
IsBadReadPtr
GetComputerNameW
SetLastError
GetACP
GetCurrentProcess
InitializeCriticalSection
lstrcpyW

gdi32

DeleteObject
GetDeviceCaps
CreateFontIndirectW

msvcrt

free
wcslen
wcscmp
_initterm
mbstowcs
_wcsicmp
_onexit
?terminate@@YAXXZ
wcsstr
_purecall
wcschr
vswprintf
__RTDynamicCast
_adjust_fdiv
memmove
wcstoul
malloc
??3@YAXPAX@Z
wcscpy
__dllonexit
_wcsupr
_except_handler3
??1type_info@@UAE@XZ
??2@YAPAXI@Z
wcscat
wcsrchr

certcli

CAFreeCertTypeExtensions
CAEnumCertTypes
CACertTypeGetSecurity
CACertTypeSetSecurity
CACloseCertType
CAEnumCertTypesForCA
CAGetCertTypeKeySpec
CAGetCAProperty
CASetCertTypeProperty
CASetCertTypeKeySpec
CACloseCA
CACreateCertType
CAUpdateCertType
CAAddCACertificateType
CASetCertTypeExtension
CAGetCertTypeExtensions
CAGetCertTypeProperty
CASetCertTypeFlags
CARemoveCACertificateType
CAFindByName
CAUpdateCA
CAGetCertTypeFlags
CAGetCertTypePropertyEx
CAFreeCAProperty
CAFindCertTypeByName
CAFreeCertTypeProperty
CAEnumNextCertType

advapi32

RegCloseKey
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c209b216199e28fbbcf5022e481747a7

Headers

File Characteristics

Imports

user32

kernel32

gdi32

msvcrt

certcli

advapi32

comctl32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 99KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 99KB

.rsrc
Size: 23KB - Virtual size: 22KB