ef168230903b24b82984224974811f8ad7ff8984d86ac864c4494028a428751f

Sharing

Copy URL

Twitter E-mail

General

Target

ef168230903b24b82984224974811f8ad7ff8984d86ac864c4494028a428751f
Size

85KB
MD5

d2b3ec175880c70ed2e90628de7729fe
SHA1

013d7951827a1c414d26d2f03a2dfd627097bcf6
SHA256

ef168230903b24b82984224974811f8ad7ff8984d86ac864c4494028a428751f
SHA512

cf173299a35d17bc334b621ef7d652de435c21f225887a5072029e8337909fda687d6084e36191451cf9039b4d262ab483923ee92971e7a796d6a0f183b585c6
SSDEEP

1536:v6tLTUdt0c09m23CDj7+STN05xiSLRs4m8:StLYdt0pm23M7+6GD3l

Score

N/A

Malware Config

Signatures

Files

ef168230903b24b82984224974811f8ad7ff8984d86ac864c4494028a428751f
.exe windows x86

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
SetScrollInfo
GetParent
WaitMessage
IsWindow
PostQuitMessage
IntersectRect
SetParent
OemToCharA
DestroyCursor
GetScrollRange
GetDC
DrawIconEx
GetWindowDC
FindWindowA
UpdateWindow
GetWindowThreadProcessId
IsCharUpperA
EnableMenuItem
RemovePropA
PeekMessageW
UnhookWindowsHookEx
IsMenu
RemoveMenu
MoveWindow
GetWindow
GetMenu
UnregisterClassA
GetPropA
CreateIcon
EnumWindows
GetScrollPos
GetLastActivePopup
IsWindowUnicode
GetMenuItemInfoA
GetCapture
SetActiveWindow
GetSysColor
DestroyWindow
GetKeyboardType
LoadBitmapA
IsDialogMessageA
IsDlgButtonChecked
SetClassLongA
MessageBoxA
SetScrollPos
SetPropA
GetSysColorBrush
RegisterWindowMessageA
GetScrollInfo
GetWindowTextLengthA
GetClientRect
CreateMenu
TranslateMessage
GetCursor
RegisterClipboardFormatA
CreatePopupMenu
SetWindowLongA
GetKeyboardLayout
GetWindowPlacement
wsprintfA

gdi32

GetTextAlign

version

VerInstallFileA
VerQueryValueA

kernel32

VirtualAllocEx
LockResource
FreeLibrary
LoadLibraryA
GetVersionExA
Sleep
CloseHandle
lstrlenW
GetCurrentProcessId
EnumCalendarInfoA
WaitForSingleObject
ExitProcess
CreateEventA
FormatMessageA
FindResourceA
FindFirstFileA
LocalReAlloc
SizeofResource
ReadFile
EnterCriticalSection
ResetEvent
HeapAlloc

Exports

Exports

yyB7Y@20
_hhrlznThK2QWRf@24
_QRu0ssuOjX
_lo9YKKVhR
_u77MBv@24
_9y_sDLT41u1@24
_yFfNE@4
_1TYBP6
_s78AW
3jxk6
zuzBM2RqUwNu@16

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

Imports

user32

gdi32

version

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 11KB - Virtual size: 42KB

.data Size: 50KB - Virtual size: 50KB

.edata Size: 1KB - Virtual size: 1KB

.badata Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 11KB - Virtual size: 42KB

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 1KB - Virtual size: 1KB

.badata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB