0e727eb3324c236de9b517eb934cf74139886b63589e4c3ce90013921d01eee1

Sharing

Copy URL Twitter E-mail

General

Target

0e727eb3324c236de9b517eb934cf74139886b63589e4c3ce90013921d01eee1
Size

99KB
MD5

fcf7a03c81f689d5bab47227f3fcc6d3
SHA1

8421befe28a5d5a6631891ff843f6946054aa8e5
SHA256

0e727eb3324c236de9b517eb934cf74139886b63589e4c3ce90013921d01eee1
SHA512

71e3068a7bc1d3e93ed51e2e309351ba1e562b16689ce01766e67c0c9937ba5aa9e419b4660bf2f0662699d9e97a4a4bc221842598b33d6a40a99eae8681059a
SSDEEP

1536:RzCLAokiQ20MXaS/Tw/fUaqRx5TIyIR/9jlGDO+bRa+niA+0DaVfuO1+VQwSm0xJ:Ycok/20pkPMboRnivV9++Pmr

Score

N/A

Malware Config

Signatures

Files

0e727eb3324c236de9b517eb934cf74139886b63589e4c3ce90013921d01eee1
.exe windows x86

16af2944f3063aee9f7d7639e4f39bda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscmp
memmove
wcschr
_adjust_fdiv
wcstoul
__dllonexit
wcslen
_initterm
??1type_info@@UAE@XZ
free
??3@YAXPAX@Z
wcscpy
malloc
?terminate@@YAXXZ
_wcsicmp
wcscat
??2@YAPAXI@Z
__RTDynamicCast
wcsstr
_wcsupr
_except_handler3
wcsrchr
vswprintf
_onexit
mbstowcs

kernel32

GetSystemDefaultLangID
FileTimeToLocalFileTime
SetLastError
GetLastError
OutputDebugStringW
OutputDebugStringA
FormatMessageW
WideCharToMultiByte
FileTimeToSystemTime
GetModuleHandleA
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStartupInfoA
DeleteCriticalSection
lstrcmpiW
lstrcpyW
GlobalAlloc
QueryPerformanceCounter
CloseHandle
GetSystemTimeAsFileTime
lstrlenW
InitializeCriticalSection
GlobalUnlock
IsBadReadPtr
GetModuleFileNameW
GlobalLock
GetProcAddress
RemoveDirectoryA
GetTickCount
GetSystemWindowsDirectoryW
GetCPInfo
InterlockedDecrement
LocalFree
LoadLibraryW
GetComputerNameW
GetDateFormatW
GlobalFree
InterlockedIncrement
LocalReAlloc
GetCurrentProcess
CreateFileW

user32

GetDC
InsertMenuItemW
SendDlgItemMessageW
LoadStringW
SetCursor
SetFocus
WinHelpW
LoadBitmapW
ReleaseDC
LoadImageW
wsprintfW
SystemParametersInfoW
SetWindowTextW
EnableWindow
DialogBoxParamW
GetDlgItem
GetParent
SendMessageW
EndDialog
GetWindowLongW
SetWindowLongW
SetDlgItemTextW
GetDlgItemTextA
MessageBoxW
RegisterClipboardFormatW
LoadIconW
LoadCursorW
PostMessageW

certcli

CACloseCA
CAGetCertTypePropertyEx
CAEnumCertTypes
CACertTypeGetSecurity
CAGetCertTypeKeySpec
CASetCertTypeExtension
CACloseCertType
CAGetCertTypeProperty
CACertTypeSetSecurity
CAFreeCertTypeExtensions
CASetCertTypeFlags
CAFreeCAProperty
CARemoveCACertificateType
CAGetCAProperty
CAEnumNextCertType
CASetCertTypeProperty
CAGetCertTypeFlags
CAUpdateCertType
CAFreeCertTypeProperty
CAFindCertTypeByName
CAFindByName
CAAddCACertificateType
CAEnumCertTypesForCA
CASetCertTypeKeySpec
CAGetCertTypeExtensions
CACreateCertType
CAUpdateCA

comctl32

PropertySheetW
CreatePropertySheetPageW

advapi32

RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16af2944f3063aee9f7d7639e4f39bda

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

certcli

comctl32

advapi32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 128KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 128KB

.rsrc
Size: 23KB - Virtual size: 23KB