966fab998024598c4264ae144eaccd063ab5cee53ed92072b5f54ec0441cc295

Sharing

Copy URL Twitter E-mail

General

Target

966fab998024598c4264ae144eaccd063ab5cee53ed92072b5f54ec0441cc295
Size

113KB
MD5

f2c75def5329a55b0f00c8683f6f6d92
SHA1

035b44c3e7c1e0dd346f12e4a6849166d2bcf0cd
SHA256

966fab998024598c4264ae144eaccd063ab5cee53ed92072b5f54ec0441cc295
SHA512

ebb825f40ef5de3bf40c45684774cbcf43fd7ba7a817f53412869b18aa4e4fa8331ca25d73d6d27ddea0b01fe3a661cc1c22d647668dd19e7c88181f14d2aeba
SSDEEP

3072:Qirat2b/8fnrxMcfm7PHmzOOU+McCNXHFh:wZScOOOJ7cSX

Score

N/A

Malware Config

Signatures

Files

966fab998024598c4264ae144eaccd063ab5cee53ed92072b5f54ec0441cc295
.exe windows x86

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathIsDirectoryA
SHQueryInfoKeyA
SHStrDupA
PathIsContentTypeA
SHDeleteKeyA
SHQueryValueExA

msvcrt

memmove
log
memcpy

kernel32

GetLastError
SetFilePointer
ResetEvent
GetStringTypeA
VirtualQuery
HeapDestroy
GetDiskFreeSpaceA
VirtualFree
GetCurrentThread
HeapAlloc
Sleep
MoveFileExA
GetUserDefaultLCID
FormatMessageA
CloseHandle
LockResource
ExitThread
LoadLibraryA
CreateFileA
GetTickCount
GetStartupInfoA
SetThreadLocale
WideCharToMultiByte
EnterCriticalSection
SetErrorMode
LocalFree
DeleteFileA
GlobalAddAtomA
GetFullPathNameA
GetLocaleInfoA
ReadFile
WaitForSingleObject
VirtualAllocEx
SetEvent
GetCPInfo
GetFileType
SetHandleCount
FreeResource
GetFileAttributesA
GetVersionExA
GetCurrentProcessId
GetVersion
LocalReAlloc
lstrcpyA
HeapFree
lstrcatA
GetProcAddress
SetEndOfFile
LocalAlloc
GetLocalTime
lstrcmpA
GlobalFindAtomA
LoadResource
EnumCalendarInfoA
lstrcmpiA
InitializeCriticalSection
MoveFileA
GetModuleFileNameA
GetFileSize
GetCommandLineA
lstrcpynA
FindFirstFileA
GetProcessHeap
VirtualAlloc
GetEnvironmentStrings
FindClose
GetStdHandle
GetCurrentProcess
SizeofResource
ExitProcess
GlobalDeleteAtom
GetStringTypeW
GetOEMCP
WriteFile
GlobalAlloc
DeleteCriticalSection
FreeLibrary
GetModuleHandleA
CompareStringA
GetACP
LoadLibraryExA
GetSystemDefaultLangID
lstrlenA
GetCurrentThreadId
MulDiv
CreateEventA
FindResourceA
SetLastError
RaiseException
GetDateFormatA

user32

CreateIcon
GetWindowTextA
DispatchMessageW
ShowOwnedPopups
SetCapture
LoadIconA
GetMenuState
PeekMessageW
MapWindowPoints
PostQuitMessage
DrawMenuBar
GetKeyState
DrawEdge
MapVirtualKeyA
GetWindowLongA
GetLastActivePopup
WaitMessage
EnumThreadWindows
SystemParametersInfoA
EndPaint
RemoveMenu
SetScrollInfo
GetKeyboardType
DestroyCursor
SetFocus
CallNextHookEx
SetScrollRange
SetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetScrollPos
GetClassLongA
ScreenToClient
IsChild
GetDlgItem
InflateRect
SetPropA
GetCursor
SetMenuItemInfoA
SetWindowTextA
IsWindowUnicode
GetClassInfoA
ClientToScreen
AdjustWindowRectEx
CreatePopupMenu
DrawTextA
GetDC
PtInRect
CreateWindowExA
DefWindowProcA
GetClipboardData
WindowFromPoint
PostMessageA
GetMenuStringA
IsWindowVisible
GetMessagePos
SetWindowPos
GetFocus
CloseClipboard
RegisterWindowMessageA
LoadBitmapA
ActivateKeyboardLayout
UnregisterClassA
SetWindowsHookExA
SetTimer
GetWindowLongW
ScrollWindow
GetMenu
GetWindowThreadProcessId
DefFrameProcA
UnhookWindowsHookEx
OemToCharA
GetDesktopWindow
PeekMessageA
EqualRect
SetClassLongA
SetScrollPos
GetSystemMenu
SetCursor
GetSystemMetrics
CharToOemA
MessageBeep
GetWindowRect
IsRectEmpty
GetMenuItemInfoA
IsDialogMessageA
SetWindowLongW
IsDialogMessageW
UpdateWindow
wsprintfA
LoadCursorA
CharNextA
GetScrollRange
ReleaseCapture
DestroyWindow
GetClientRect
GetWindowDC
CreateMenu
SetMenu
TranslateMDISysAccel
SetActiveWindow
GetKeyboardState
SetWindowPlacement
SetRect
DestroyIcon
TranslateMessage
GetKeyNameTextA
SetWindowLongA
FrameRect
InvalidateRect
CheckMenuItem
DrawAnimatedRects
SendMessageA
KillTimer
GetKeyboardLayoutNameA
GetActiveWindow
DrawIcon
RemovePropA
GetKeyboardLayoutList
MoveWindow
GetWindowPlacement
CharLowerBuffA
GetIconInfo
DrawFrameControl
InsertMenuA
GetDCEx
DeleteMenu
DrawIconEx
CallWindowProcA
GetTopWindow
IntersectRect
RegisterClipboardFormatA
GetForegroundWindow
EnumChildWindows
GetSysColorBrush
GetClassNameA
SetForegroundWindow
CharNextW
SendMessageW
OffsetRect
IsWindowEnabled
CharLowerA
IsIconic
GetPropA
GetScrollInfo
ShowScrollBar
IsWindow
MsgWaitForMultipleObjects
InsertMenuItemA
DestroyMenu
ChildWindowFromPoint
RegisterClassA
LoadKeyboardLayoutA
EnableWindow
EnableMenuItem
IsZoomed
DefMDIChildProcA
GetSysColor
OpenClipboard
GetCapture
TrackPopupMenu
GetParent
EmptyClipboard
SetClipboardData
EnumWindows
MessageBoxA
FindWindowA
ReleaseDC
GetCursorPos
DispatchMessageA
GetKeyboardLayout
ShowWindow
LoadStringA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_Create
ImageList_Write
ImageList_Draw

Sections

CODE
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

Imports

shlwapi

msvcrt

kernel32

user32

comctl32

Sections

CODE Size: 100KB - Virtual size: 99KB

.data Size: 7KB - Virtual size: 7KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 100KB - Virtual size: 99KB

.data
Size: 7KB - Virtual size: 7KB

DATA
Size: 4KB - Virtual size: 4KB