bc1a9c028e5ac9cb7ba150f1b3441392350a650e8caa00bd2bc3f5740b50582c

Sharing

Copy URL Twitter E-mail

General

Target

bc1a9c028e5ac9cb7ba150f1b3441392350a650e8caa00bd2bc3f5740b50582c
Size

113KB
MD5

f2b4d7c34cdbe54b08b232c474729e27
SHA1

3831f78b1a6da97e6b696fbfa67dbf715a445d5a
SHA256

bc1a9c028e5ac9cb7ba150f1b3441392350a650e8caa00bd2bc3f5740b50582c
SHA512

4c5ba21e31e887faabe6176c8f3db4acef10b96b7905cb513eb8b498840dfac351f51ccbdf54f9f5cf799877bc6fff5fdece66164af70caa5ef32e1b9237e716
SSDEEP

3072:Airat2b/8fnrxMcfm7PHmzOOU+McCNXHFh:gZScOOOJ7cSX

Score

N/A

Malware Config

Signatures

Files

bc1a9c028e5ac9cb7ba150f1b3441392350a650e8caa00bd2bc3f5740b50582c
.exe windows x86

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathIsDirectoryA
SHQueryInfoKeyA
SHStrDupA
PathIsContentTypeA
SHDeleteKeyA
SHQueryValueExA

msvcrt

memmove
log
memcpy

kernel32

GetLastError
SetFilePointer
ResetEvent
GetStringTypeA
VirtualQuery
HeapDestroy
GetDiskFreeSpaceA
VirtualFree
GetCurrentThread
HeapAlloc
Sleep
MoveFileExA
GetUserDefaultLCID
FormatMessageA
CloseHandle
LockResource
ExitThread
LoadLibraryA
CreateFileA
GetTickCount
GetStartupInfoA
SetThreadLocale
WideCharToMultiByte
EnterCriticalSection
SetErrorMode
LocalFree
DeleteFileA
GlobalAddAtomA
GetFullPathNameA
GetLocaleInfoA
ReadFile
WaitForSingleObject
VirtualAllocEx
SetEvent
GetCPInfo
GetFileType
SetHandleCount
FreeResource
GetFileAttributesA
GetVersionExA
GetCurrentProcessId
GetVersion
LocalReAlloc
lstrcpyA
HeapFree
lstrcatA
GetProcAddress
SetEndOfFile
LocalAlloc
GetLocalTime
lstrcmpA
GlobalFindAtomA
LoadResource
EnumCalendarInfoA
lstrcmpiA
InitializeCriticalSection
MoveFileA
GetModuleFileNameA
GetFileSize
GetCommandLineA
lstrcpynA
FindFirstFileA
GetProcessHeap
VirtualAlloc
GetEnvironmentStrings
FindClose
GetStdHandle
GetCurrentProcess
SizeofResource
ExitProcess
GlobalDeleteAtom
GetStringTypeW
GetOEMCP
WriteFile
GlobalAlloc
DeleteCriticalSection
FreeLibrary
GetModuleHandleA
CompareStringA
GetACP
LoadLibraryExA
GetSystemDefaultLangID
lstrlenA
GetCurrentThreadId
MulDiv
CreateEventA
FindResourceA
SetLastError
RaiseException
GetDateFormatA

user32

CreateIcon
GetWindowTextA
DispatchMessageW
ShowOwnedPopups
SetCapture
LoadIconA
GetMenuState
PeekMessageW
MapWindowPoints
PostQuitMessage
DrawMenuBar
GetKeyState
DrawEdge
MapVirtualKeyA
GetWindowLongA
GetLastActivePopup
WaitMessage
EnumThreadWindows
SystemParametersInfoA
EndPaint
RemoveMenu
SetScrollInfo
GetKeyboardType
DestroyCursor
SetFocus
CallNextHookEx
SetScrollRange
SetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetScrollPos
GetClassLongA
ScreenToClient
IsChild
GetDlgItem
InflateRect
SetPropA
GetCursor
SetMenuItemInfoA
SetWindowTextA
IsWindowUnicode
GetClassInfoA
ClientToScreen
AdjustWindowRectEx
CreatePopupMenu
DrawTextA
GetDC
PtInRect
CreateWindowExA
DefWindowProcA
GetClipboardData
WindowFromPoint
PostMessageA
GetMenuStringA
IsWindowVisible
GetMessagePos
SetWindowPos
GetFocus
CloseClipboard
RegisterWindowMessageA
LoadBitmapA
ActivateKeyboardLayout
UnregisterClassA
SetWindowsHookExA
SetTimer
GetWindowLongW
ScrollWindow
GetMenu
GetWindowThreadProcessId
DefFrameProcA
UnhookWindowsHookEx
OemToCharA
GetDesktopWindow
PeekMessageA
EqualRect
SetClassLongA
SetScrollPos
GetSystemMenu
SetCursor
GetSystemMetrics
CharToOemA
MessageBeep
GetWindowRect
IsRectEmpty
GetMenuItemInfoA
IsDialogMessageA
SetWindowLongW
IsDialogMessageW
UpdateWindow
wsprintfA
LoadCursorA
CharNextA
GetScrollRange
ReleaseCapture
DestroyWindow
GetClientRect
GetWindowDC
CreateMenu
SetMenu
TranslateMDISysAccel
SetActiveWindow
GetKeyboardState
SetWindowPlacement
SetRect
DestroyIcon
TranslateMessage
GetKeyNameTextA
SetWindowLongA
FrameRect
InvalidateRect
CheckMenuItem
DrawAnimatedRects
SendMessageA
KillTimer
GetKeyboardLayoutNameA
GetActiveWindow
DrawIcon
RemovePropA
GetKeyboardLayoutList
MoveWindow
GetWindowPlacement
CharLowerBuffA
GetIconInfo
DrawFrameControl
InsertMenuA
GetDCEx
DeleteMenu
DrawIconEx
CallWindowProcA
GetTopWindow
IntersectRect
RegisterClipboardFormatA
GetForegroundWindow
EnumChildWindows
GetSysColorBrush
GetClassNameA
SetForegroundWindow
CharNextW
SendMessageW
OffsetRect
IsWindowEnabled
CharLowerA
IsIconic
GetPropA
GetScrollInfo
ShowScrollBar
IsWindow
MsgWaitForMultipleObjects
InsertMenuItemA
DestroyMenu
ChildWindowFromPoint
RegisterClassA
LoadKeyboardLayoutA
EnableWindow
EnableMenuItem
IsZoomed
DefMDIChildProcA
GetSysColor
OpenClipboard
GetCapture
TrackPopupMenu
GetParent
EmptyClipboard
SetClipboardData
EnumWindows
MessageBoxA
FindWindowA
ReleaseDC
GetCursorPos
DispatchMessageA
GetKeyboardLayout
ShowWindow
LoadStringA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_Create
ImageList_Write
ImageList_Draw

Sections

CODE
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

Imports

shlwapi

msvcrt

kernel32

user32

comctl32

Sections

CODE Size: 100KB - Virtual size: 99KB

.data Size: 7KB - Virtual size: 7KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 100KB - Virtual size: 99KB

.data
Size: 7KB - Virtual size: 7KB

DATA
Size: 4KB - Virtual size: 4KB