99f143cd68b625c77e0f60ce0441a134c2e8b997b79d9db56ae3c18a12d424d5

Sharing

Copy URL

Twitter E-mail

General

Target

99f143cd68b625c77e0f60ce0441a134c2e8b997b79d9db56ae3c18a12d424d5
Size

21KB
MD5

8bd55215e0a9b55f25de13e13186e45e
SHA1

53f3a094b5746575fab6d3893d4ecb9fdf1b93ce
SHA256

99f143cd68b625c77e0f60ce0441a134c2e8b997b79d9db56ae3c18a12d424d5
SHA512

73cc5b9148f2f0ee544592abc7b271ee9434a2d5518a6e3e6a9f2d3ac41707565760ddf8eac76705ad087f7cb004b0719f76d0b404adadfb47bb54d6462643ff
SSDEEP

384:Vfe7UacKSRHlVxAFDp5QYU7mV/K2FzSBhbryFpdXnDRLwDIDJ6:Vfe7U7dpAF/QJqV/K20BRyH5JwDIM

Score

N/A

Malware Config

Signatures

Files

99f143cd68b625c77e0f60ce0441a134c2e8b997b79d9db56ae3c18a12d424d5
.exe windows x86

1589e53243c19cbbc1d640c28d181816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

RealShellExecuteExW

ole32

GetHookInterface
CoRevertToSelf
PropSysAllocString
CoRegisterMessageFilter

user32

LoadStringW
DefMDIChildProcW
CopyRect
GrayStringW
GetMenuItemID
GetUpdateRect
SetKeyboardState
GetClassInfoExW
GetMenuContextHelpId
ChildWindowFromPoint
LookupIconIdFromDirectoryEx
GetOpenClipboardWindow
BlockInput
LockWindowStation
InsertMenuItemA
IsCharAlphaNumericW
DdeCreateDataHandle

gdi32

SetDIBits
GetEnhMetaFileA
GetStretchBltMode
GetTextCharsetInfo
SetBkMode
GetBoundsRect
GetDIBColorTable
AngleArc
SetPixel
GetEnhMetaFileBits
CheckColorsInGamut
GetRandomRgn

msvcrt

_ismbbgraph
putc
iswascii
__p___argv
__threadhandle
_adj_fprem1
_onexit
_ismbbkana
strchr
__p__commode
exit
_eof
_get_osfhandle
_spawnlpe
setlocale
_finite
_wstrdate
_mbsinc

kernel32

GetModuleHandleA
GetProcessShutdownParameters
GetStartupInfoW
lstrlenA
RtlFillMemory
lstrcmpiA
GetSystemTime
VerLanguageNameW
GetTempPathA
OpenMutexW
VirtualFree
VirtualAlloc
lstrcmpiW
GetModuleHandleW
EnumSystemLocalesW
GetDevicePowerState
InterlockedExchangeAdd
lstrlenW
ExitProcess
GetLocalTime
lstrcmpW
DebugActiveProcess
EnumCalendarInfoExA
lstrcmpA
SetLocalTime
Sleep
_lcreat

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.isnhv
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hcfb
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wertx
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1589e53243c19cbbc1d640c28d181816

Headers

File Characteristics

Imports

shell32

ole32

user32

gdi32

msvcrt

kernel32

Sections

.text Size: 4KB - Virtual size: 5KB

.isnhv Size: 4KB - Virtual size: 10KB

.hcfb Size: 6KB - Virtual size: 15KB

.wertx Size: 7KB - Virtual size: 14KB

.reloc Size: 1024B - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 5KB

.isnhv
Size: 4KB - Virtual size: 10KB

.hcfb
Size: 6KB - Virtual size: 15KB

.wertx
Size: 7KB - Virtual size: 14KB

.reloc
Size: 1024B - Virtual size: 1KB