a6e67dd0c34113ce114560ff5841fb664b4e1a2b78a59a6b86c82287fac00ded

Sharing

Copy URL Twitter E-mail

General

Target

a6e67dd0c34113ce114560ff5841fb664b4e1a2b78a59a6b86c82287fac00ded
Size

113KB
MD5

f22d4bb6a6885a907ca2c2b428aff300
SHA1

14a24c63d896a1af7d677371fab812d8528dbfed
SHA256

a6e67dd0c34113ce114560ff5841fb664b4e1a2b78a59a6b86c82287fac00ded
SHA512

c70555293fc407100fa86b7dd159303ed248f56d015c7298f17843802c891bff3f039411ff76645116b9288bbe28f1ce81d240b9f4d4b3e8c175d550db469145
SSDEEP

3072:Iirat2b/8fnrxMcfm7PHmzOOU+McCNXHFh:IZScOOOJ7cSX

Score

N/A

Malware Config

Signatures

Files

a6e67dd0c34113ce114560ff5841fb664b4e1a2b78a59a6b86c82287fac00ded
.exe windows x86

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathIsDirectoryA
SHQueryInfoKeyA
SHStrDupA
PathIsContentTypeA
SHDeleteKeyA
SHQueryValueExA

msvcrt

memmove
log
memcpy

kernel32

GetLastError
SetFilePointer
ResetEvent
GetStringTypeA
VirtualQuery
HeapDestroy
GetDiskFreeSpaceA
VirtualFree
GetCurrentThread
HeapAlloc
Sleep
MoveFileExA
GetUserDefaultLCID
FormatMessageA
CloseHandle
LockResource
ExitThread
LoadLibraryA
CreateFileA
GetTickCount
GetStartupInfoA
SetThreadLocale
WideCharToMultiByte
EnterCriticalSection
SetErrorMode
LocalFree
DeleteFileA
GlobalAddAtomA
GetFullPathNameA
GetLocaleInfoA
ReadFile
WaitForSingleObject
VirtualAllocEx
SetEvent
GetCPInfo
GetFileType
SetHandleCount
FreeResource
GetFileAttributesA
GetVersionExA
GetCurrentProcessId
GetVersion
LocalReAlloc
lstrcpyA
HeapFree
lstrcatA
GetProcAddress
SetEndOfFile
LocalAlloc
GetLocalTime
lstrcmpA
GlobalFindAtomA
LoadResource
EnumCalendarInfoA
lstrcmpiA
InitializeCriticalSection
MoveFileA
GetModuleFileNameA
GetFileSize
GetCommandLineA
lstrcpynA
FindFirstFileA
GetProcessHeap
VirtualAlloc
GetEnvironmentStrings
FindClose
GetStdHandle
GetCurrentProcess
SizeofResource
ExitProcess
GlobalDeleteAtom
GetStringTypeW
GetOEMCP
WriteFile
GlobalAlloc
DeleteCriticalSection
FreeLibrary
GetModuleHandleA
CompareStringA
GetACP
LoadLibraryExA
GetSystemDefaultLangID
lstrlenA
GetCurrentThreadId
MulDiv
CreateEventA
FindResourceA
SetLastError
RaiseException
GetDateFormatA

user32

CreateIcon
GetWindowTextA
DispatchMessageW
ShowOwnedPopups
SetCapture
LoadIconA
GetMenuState
PeekMessageW
MapWindowPoints
PostQuitMessage
DrawMenuBar
GetKeyState
DrawEdge
MapVirtualKeyA
GetWindowLongA
GetLastActivePopup
WaitMessage
EnumThreadWindows
SystemParametersInfoA
EndPaint
RemoveMenu
SetScrollInfo
GetKeyboardType
DestroyCursor
SetFocus
CallNextHookEx
SetScrollRange
SetParent
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetScrollPos
GetClassLongA
ScreenToClient
IsChild
GetDlgItem
InflateRect
SetPropA
GetCursor
SetMenuItemInfoA
SetWindowTextA
IsWindowUnicode
GetClassInfoA
ClientToScreen
AdjustWindowRectEx
CreatePopupMenu
DrawTextA
GetDC
PtInRect
CreateWindowExA
DefWindowProcA
GetClipboardData
WindowFromPoint
PostMessageA
GetMenuStringA
IsWindowVisible
GetMessagePos
SetWindowPos
GetFocus
CloseClipboard
RegisterWindowMessageA
LoadBitmapA
ActivateKeyboardLayout
UnregisterClassA
SetWindowsHookExA
SetTimer
GetWindowLongW
ScrollWindow
GetMenu
GetWindowThreadProcessId
DefFrameProcA
UnhookWindowsHookEx
OemToCharA
GetDesktopWindow
PeekMessageA
EqualRect
SetClassLongA
SetScrollPos
GetSystemMenu
SetCursor
GetSystemMetrics
CharToOemA
MessageBeep
GetWindowRect
IsRectEmpty
GetMenuItemInfoA
IsDialogMessageA
SetWindowLongW
IsDialogMessageW
UpdateWindow
wsprintfA
LoadCursorA
CharNextA
GetScrollRange
ReleaseCapture
DestroyWindow
GetClientRect
GetWindowDC
CreateMenu
SetMenu
TranslateMDISysAccel
SetActiveWindow
GetKeyboardState
SetWindowPlacement
SetRect
DestroyIcon
TranslateMessage
GetKeyNameTextA
SetWindowLongA
FrameRect
InvalidateRect
CheckMenuItem
DrawAnimatedRects
SendMessageA
KillTimer
GetKeyboardLayoutNameA
GetActiveWindow
DrawIcon
RemovePropA
GetKeyboardLayoutList
MoveWindow
GetWindowPlacement
CharLowerBuffA
GetIconInfo
DrawFrameControl
InsertMenuA
GetDCEx
DeleteMenu
DrawIconEx
CallWindowProcA
GetTopWindow
IntersectRect
RegisterClipboardFormatA
GetForegroundWindow
EnumChildWindows
GetSysColorBrush
GetClassNameA
SetForegroundWindow
CharNextW
SendMessageW
OffsetRect
IsWindowEnabled
CharLowerA
IsIconic
GetPropA
GetScrollInfo
ShowScrollBar
IsWindow
MsgWaitForMultipleObjects
InsertMenuItemA
DestroyMenu
ChildWindowFromPoint
RegisterClassA
LoadKeyboardLayoutA
EnableWindow
EnableMenuItem
IsZoomed
DefMDIChildProcA
GetSysColor
OpenClipboard
GetCapture
TrackPopupMenu
GetParent
EmptyClipboard
SetClipboardData
EnumWindows
MessageBoxA
FindWindowA
ReleaseDC
GetCursorPos
DispatchMessageA
GetKeyboardLayout
ShowWindow
LoadStringA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_Create
ImageList_Write
ImageList_Draw

Sections

CODE
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db61f1094a0d34450644d0d14c9a2894

Headers

File Characteristics

Imports

shlwapi

msvcrt

kernel32

user32

comctl32

Sections

CODE Size: 100KB - Virtual size: 99KB

.data Size: 7KB - Virtual size: 7KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 100KB - Virtual size: 99KB

.data
Size: 7KB - Virtual size: 7KB

DATA
Size: 4KB - Virtual size: 4KB