25da2c24c03f4dfaf0745269f176da09659d719236d0371942380caf65dff7c4

Sharing

Copy URL Twitter E-mail

General

Target

25da2c24c03f4dfaf0745269f176da09659d719236d0371942380caf65dff7c4
Size

111KB
MD5

c33df2f2424283a4c31eedd545fd2458
SHA1

22cf723c3a496edc0b34dcaa632d42ea26cdbdc6
SHA256

25da2c24c03f4dfaf0745269f176da09659d719236d0371942380caf65dff7c4
SHA512

bfce13dfbbfd6426100a1289318c5e4e49dcf7b3f47800eb7dfa52f2f7d05029cfd02c66d99c04d139fa1e0c975e3113d9c232cb8d85d5c472ec3a185a00f417
SSDEEP

3072:Eh48skUIaH6suuobGg4rRbDkW8fKW8fLW8f:Ehps/IZOgWWW4KW4LW4

Score

N/A

Malware Config

Signatures

Files

25da2c24c03f4dfaf0745269f176da09659d719236d0371942380caf65dff7c4
.exe windows x86

64989941976a3e78c12ed4513c245184

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
CreateDialogIndirectParamA
SetSysColors
IsWindowVisible
CreateDialogParamA
ChildWindowFromPoint
GetForegroundWindow
IsIconic
MessageBoxA
IsWindow
GetDlgItemTextA

comctl32

FlatSB_GetScrollRange
CreatePropertySheetPageA
ord3
PropertySheetW
FlatSB_ShowScrollBar

urlmon

HlinkSimpleNavigateToMoniker

shlwapi

PathFindFileNameW
StrPBrkW
PathIsUNCServerShareW
PathRemoveFileSpecW
PathFileExistsA
PathRemoveFileSpecA
PathCanonicalizeW
PathRemoveArgsA
StrDupA
PathIsContentTypeA
PathIsURLW
SHRegOpenUSKeyA
PathStripPathA

kernel32

GlobalUnlock
DeleteCriticalSection
IsBadReadPtr
OpenSemaphoreA
LocalUnlock
OpenMutexA
GlobalFree
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetLastError
GetFullPathNameA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
GetCurrentDirectoryA
GetDriveTypeA
HeapFree
HeapAlloc
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
InitializeCriticalSection
SetStdHandle
HeapReAlloc
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
RaiseException
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle

comdlg32

FindTextW
PrintDlgA
PageSetupDlgA
PrintDlgW
FindTextA
ChooseFontA
ReplaceTextW
ReplaceTextA
PageSetupDlgW

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64989941976a3e78c12ed4513c245184

Headers

File Characteristics

Imports

user32

comctl32

urlmon

shlwapi

kernel32

comdlg32

Sections

.text Size: 29KB - Virtual size: 28KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 18KB - Virtual size: 27KB

.rsrc Size: 59KB - Virtual size: 58KB

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 18KB - Virtual size: 27KB

.rsrc
Size: 59KB - Virtual size: 58KB