c06179d6b59601078e9c96c6333017cf91bc19d2b2bae882503ab48f1815328e

Sharing

Copy URL Twitter E-mail

General

Target

c06179d6b59601078e9c96c6333017cf91bc19d2b2bae882503ab48f1815328e
Size

68KB
MD5

f558976296f0af8efccc7f4ddc4c1ef4
SHA1

dd22521b7fe5511679e88f914c3088e7ca42d205
SHA256

c06179d6b59601078e9c96c6333017cf91bc19d2b2bae882503ab48f1815328e
SHA512

eb86ef2cc54887cf1832bfb71ce7f05e3ee05d9b26dfe5b8aa261e76f77666c7631fbd6b463430f35724631fe69f431038eb0508a62dbd4d6c725b4d5cb327dc
SSDEEP

1536:sOxnuI+8Yfjg6MJyPb2gCsmMuHdZwKNdp3T+p:sOxuI+vfjQK2gBqnwKNdxT+p

Score

N/A

Malware Config

Signatures

Files

c06179d6b59601078e9c96c6333017cf91bc19d2b2bae882503ab48f1815328e
.exe windows x86

89e30ee6a4128f45564edebae67114c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyW
MulDiv
lstrlenW
lstrcmpW
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
FindResourceW
SetLastError
GlobalFree
GlobalHandle
LockResource
LoadResource
GetModuleHandleW
SizeofResource
MultiByteToWideChar
lstrcmpiW
lstrcpynW
DebugBreak
HeapSize
GetVersionExA
LoadLibraryA
GetLastError
ExitProcess
GetModuleHandleA
GetStartupInfoW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
lstrcpyA
lstrlenA
GetModuleFileNameA
RtlUnwind
VirtualQuery
GetProcAddress
CopyFileA
WinExec
FreeLibrary
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryExW
RaiseException
HeapReAlloc

user32

GetMessageW
PeekMessageW
CreateDialogIndirectParamW
SetWindowContextHelpId
MapDialogRect
CallWindowProcW
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
FillRect
SetCapture
ReleaseCapture
GetSysColor
DialogBoxParamW
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
TranslateMessage
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
DefWindowProcW
FindWindowW
DispatchMessageW
ShowWindow
FindWindowExW
PostQuitMessage
IsDialogMessageW
GetDlgItem
KillTimer
SetTimer
SendMessageW
SetWindowLongW
DestroyWindow
UnregisterClassW
GetWindow
GetWindowRect
SystemParametersInfoW
GetClientRect
wsprintfW
CreateWindowExW
CreateAcceleratorTableW
GetActiveWindow
GetSystemMetrics
LoadImageW
CharNextW
GetClassNameW
RedrawWindow
IsWindow
DestroyAcceleratorTable
GetFocus
IsChild
SetFocus
RegisterClassExW
BeginPaint
MapWindowPoints
SetWindowPos
GetParent
GetWindowLongW
EndDialog
EndPaint
MessageBoxA

gdi32

CreateSolidBrush
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
DeleteObject
SelectObject

advapi32

RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetFolderPathA

ole32

CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal

oleaut32

SysStringByteLen
SysAllocString
VarUI4FromStr
DispCallFunc
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysFreeString
VariantClear
VariantInit
SysStringLen
SysAllocStringLen

shlwapi

PathAppendA
PathAppendW

comctl32

InitCommonControlsEx

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89e30ee6a4128f45564edebae67114c3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 7KB