be3101a5cbaf822d89e2665ce05c0aa936f03e17d3680e3aa85e59638751ef74

Sharing

Copy URL Twitter E-mail

General

Target

be3101a5cbaf822d89e2665ce05c0aa936f03e17d3680e3aa85e59638751ef74
Size

113KB
MD5

f0f630c9af3c71e269576f8b047495f9
SHA1

2f240ac7cf19872de262293fc56d177092f107df
SHA256

be3101a5cbaf822d89e2665ce05c0aa936f03e17d3680e3aa85e59638751ef74
SHA512

160c4e53e2b010e8b83ff3221fae041c1233abb1f83e96b84d5c450e97699f373c70e20f60c3c5b54b176c2d730d721d6415ad1f9d89f0d0265a9dc5516effb5
SSDEEP

3072:0irat2b/8fnrxMcfm7PHmzOOU+McCNXHFh:sZScOOOJ7cSX

Score

N/A

Malware Config

Signatures

Files

be3101a5cbaf822d89e2665ce05c0aa936f03e17d3680e3aa85e59638751ef74
.exe windows x86

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathIsDirectoryA
SHQueryInfoKeyA
SHStrDupA
PathIsContentTypeA
SHDeleteKeyA
SHQueryValueExA

msvcrt

memmove
log
memcpy

kernel32

GetLastError
SetFilePointer
ResetEvent
GetStringTypeA
VirtualQuery
HeapDestroy
GetDiskFreeSpaceA
VirtualFree
GetCurrentThread
HeapAlloc
Sleep
MoveFileExA
GetUserDefaultLCID
FormatMessageA
CloseHandle
LockResource
ExitThread
LoadLibraryA
CreateFileA
GetTickCount
GetStartupInfoA
SetThreadLocale
WideCharToMultiByte
EnterCriticalSection
SetErrorMode
LocalFree
DeleteFileA
GlobalAddAtomA
GetFullPathNameA
GetLocaleInfoA
ReadFile
WaitForSingleObject
VirtualAllocEx
SetEvent
GetCPInfo
GetFileType
SetHandleCount
FreeResource
GetFileAttributesA
GetVersionExA
GetCurrentProcessId
GetVersion
LocalReAlloc
lstrcpyA
HeapFree
lstrcatA
GetProcAddress
SetEndOfFile
LocalAlloc
GetLocalTime
lstrcmpA
GlobalFindAtomA
LoadResource
EnumCalendarInfoA
lstrcmpiA
InitializeCriticalSection
MoveFileA
GetModuleFileNameA
GetFileSize
GetCommandLineA
lstrcpynA
FindFirstFileA
GetProcessHeap
VirtualAlloc
GetEnvironmentStrings
FindClose
GetStdHandle
GetCurrentProcess
SizeofResource
ExitProcess
GlobalDeleteAtom
GetStringTypeW
GetOEMCP
WriteFile
GlobalAlloc
DeleteCriticalSection
FreeLibrary
GetModuleHandleA
CompareStringA
GetACP
LoadLibraryExA
GetSystemDefaultLangID
lstrlenA
GetCurrentThreadId
MulDiv
CreateEventA
FindResourceA
SetLastError
RaiseException
GetDateFormatA

user32

CreateIcon
GetWindowTextA
DispatchMessageW
ShowOwnedPopups
SetCapture
LoadIconA
GetMenuState
PeekMessageW
MapWindowPoints
PostQuitMessage
DrawMenuBar
GetKeyState
DrawEdge
MapVirtualKeyA
GetWindowLongA
GetLastActivePopup
WaitMessage
EnumThreadWindows
SystemParametersInfoA
EndPaint
RemoveMenu
SetScrollInfo
GetKeyboardType
DestroyCursor
SetFocus
CallNextHookEx
SetScrollRange
SetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetScrollPos
GetClassLongA
ScreenToClient
IsChild
GetDlgItem
InflateRect
SetPropA
GetCursor
SetMenuItemInfoA
SetWindowTextA
IsWindowUnicode
GetClassInfoA
ClientToScreen
AdjustWindowRectEx
CreatePopupMenu
DrawTextA
GetDC
PtInRect
CreateWindowExA
DefWindowProcA
GetClipboardData
WindowFromPoint
PostMessageA
GetMenuStringA
IsWindowVisible
GetMessagePos
SetWindowPos
GetFocus
CloseClipboard
RegisterWindowMessageA
LoadBitmapA
ActivateKeyboardLayout
UnregisterClassA
SetWindowsHookExA
SetTimer
GetWindowLongW
ScrollWindow
GetMenu
GetWindowThreadProcessId
DefFrameProcA
UnhookWindowsHookEx
OemToCharA
GetDesktopWindow
PeekMessageA
EqualRect
SetClassLongA
SetScrollPos
GetSystemMenu
SetCursor
GetSystemMetrics
CharToOemA
MessageBeep
GetWindowRect
IsRectEmpty
GetMenuItemInfoA
IsDialogMessageA
SetWindowLongW
IsDialogMessageW
UpdateWindow
wsprintfA
LoadCursorA
CharNextA
GetScrollRange
ReleaseCapture
DestroyWindow
GetClientRect
GetWindowDC
CreateMenu
SetMenu
TranslateMDISysAccel
SetActiveWindow
GetKeyboardState
SetWindowPlacement
SetRect
DestroyIcon
TranslateMessage
GetKeyNameTextA
SetWindowLongA
FrameRect
InvalidateRect
CheckMenuItem
DrawAnimatedRects
SendMessageA
KillTimer
GetKeyboardLayoutNameA
GetActiveWindow
DrawIcon
RemovePropA
GetKeyboardLayoutList
MoveWindow
GetWindowPlacement
CharLowerBuffA
GetIconInfo
DrawFrameControl
InsertMenuA
GetDCEx
DeleteMenu
DrawIconEx
CallWindowProcA
GetTopWindow
IntersectRect
RegisterClipboardFormatA
GetForegroundWindow
EnumChildWindows
GetSysColorBrush
GetClassNameA
SetForegroundWindow
CharNextW
SendMessageW
OffsetRect
IsWindowEnabled
CharLowerA
IsIconic
GetPropA
GetScrollInfo
ShowScrollBar
IsWindow
MsgWaitForMultipleObjects
InsertMenuItemA
DestroyMenu
ChildWindowFromPoint
RegisterClassA
LoadKeyboardLayoutA
EnableWindow
EnableMenuItem
IsZoomed
DefMDIChildProcA
GetSysColor
OpenClipboard
GetCapture
TrackPopupMenu
GetParent
EmptyClipboard
SetClipboardData
EnumWindows
MessageBoxA
FindWindowA
ReleaseDC
GetCursorPos
DispatchMessageA
GetKeyboardLayout
ShowWindow
LoadStringA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_Create
ImageList_Write
ImageList_Draw

Sections

CODE
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

Imports

shlwapi

msvcrt

kernel32

user32

comctl32

Sections

CODE Size: 100KB - Virtual size: 99KB

.data Size: 7KB - Virtual size: 7KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 100KB - Virtual size: 99KB

.data
Size: 7KB - Virtual size: 7KB

DATA
Size: 4KB - Virtual size: 4KB