ce61c5d72c629375b962167286b3cf9fe17617dd8fd245ef9030e541c14bd3e8

Sharing

Copy URL Twitter E-mail

General

Target

ce61c5d72c629375b962167286b3cf9fe17617dd8fd245ef9030e541c14bd3e8
Size

956KB
MD5

799168ffe28130831c4544c2724aac99
SHA1

c686d472dfd3b911e2b3c7d0714c3d9d031ad56e
SHA256

ce61c5d72c629375b962167286b3cf9fe17617dd8fd245ef9030e541c14bd3e8
SHA512

9f8fa3e91a3459ae1c5e530850e67a2be58ba956a6d50c78203862c36fc176888e246753a80d93559853006f36cdadf8e0f2c1eee4bec4c01257cccd926c14af
SSDEEP

24576:mTzsx1yU7XeoEoBEIRZbNl65TARjoLTUh52:h/eoRK6aAjoLT

Score

N/A

Malware Config

Signatures

Files

ce61c5d72c629375b962167286b3cf9fe17617dd8fd245ef9030e541c14bd3e8
.exe windows x86

914475cc609fdc573ca62a482e85380c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
VirtualAlloc
VirtualFree
GetLocalTime
SystemTimeToFileTime
GetSystemTime
GetSystemTimeAsFileTime
GetStringTypeA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
VirtualQuery
HeapSize
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
GetTickCount
QueryPerformanceCounter
VirtualProtect
GetCPInfo
GetStartupInfoW
TerminateProcess
GetModuleHandleA
HeapReAlloc
RtlUnwind
ExitProcess
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetVersionExA
IsBadReadPtr
IsBadWritePtr
WriteFile
FlushFileBuffers
CreateFileW
SetFilePointer
SetEndOfFile
FlushViewOfFile
ReadFile
GetFileSizeEx
GetFileSize
GetSystemInfo
WideCharToMultiByte
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetOEMCP
SetStdHandle
CompareStringA
GetStringTypeExW
ReleaseMutex
SetEvent
ResetEvent
CreateEventW
ReleaseSemaphore
CreateSemaphoreW
CreateMutexW
WaitForSingleObject
CloseHandle
SetEnvironmentVariableA
CreateFileA
GetLocaleInfoW
Sleep
MulDiv
CompareStringW
lstrcmpW
LoadLibraryW
GetProcAddress
GetCurrentProcessId
SetErrorMode
GetFileAttributesW
lstrcatW
lstrcpynA
LockResource
HeapFree
GetCurrentDirectoryW
lstrlenA
FindFirstFileW
GetFullPathNameW
SetLastError
FindClose
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetLastError
GetModuleFileNameW
GetModuleHandleW
lstrcpyW
InterlockedIncrement
GetCurrentThreadId
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStringTypeW
SetUnhandledExceptionFilter

user32

EqualRect
IntersectRect
SetScrollInfo
EndPaint
DrawFocusRect
BeginPaint
GetDlgCtrlID
SetCapture
GetCapture
ReleaseCapture
GetCursorPos
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
EndDialog
SetMenuDefaultItem
GetForegroundWindow
SetForegroundWindow
GetClassNameW
ModifyMenuW
DrawFrameControl
InflateRect
GetMenuItemID
CallNextHookEx
SetWindowsHookExW
SetRectEmpty
GetSystemMetrics
ReleaseDC
RegisterWindowMessageW
UnhookWindowsHookEx
GetSysColorBrush
FrameRect
DrawTextW
GetMessagePos
WindowFromPoint
ScreenToClient
GetWindowThreadProcessId
IsWindowEnabled
GetWindow
CreatePopupMenu
MessageBeep
RemoveMenu
PtInRect
TrackPopupMenuEx
SetFocus
PostQuitMessage
IsWindowVisible
GetActiveWindow
DialogBoxParamW
CharLowerW
GetDC
GetSubMenu
TrackPopupMenu
LoadBitmapW
GetKeyState
SetRect
ScrollWindowEx
SetScrollPos
GetScrollInfo
TabbedTextOutW
IsChild
SetTimer
KillTimer
GetFocus
GetWindowRect
EnableMenuItem
AppendMenuW
DeleteMenu
MonitorFromPoint
GetMonitorInfoW
SetMenuItemInfoW
ClientToScreen
AdjustWindowRectEx
MessageBoxA
UnionRect
ScrollDC
AnimateWindow
CharUpperW
GetSysColor
GetMenuItemInfoW
GetMenuItemCount
DestroyMenu
SystemParametersInfoW
MoveWindow
OffsetRect
IsRectEmpty
CopyRect
SetCursor
IsDialogMessageW
InvalidateRect
UpdateWindow
MapWindowPoints
GetWindowPlacement
IsZoomed
SetMenu
GetMenu
SetWindowTextW
PostMessageW
GetMenuStringW
TranslateAcceleratorW
InsertMenuW
IsMenu
LoadStringA
GetParent
CallWindowProcW
DrawEdge
FillRect
wsprintfW
IsWindow
ShowWindow
GetClientRect
SetWindowPos
GetWindowLongW
SendMessageW
MessageBoxW
DefWindowProcW
CharNextW
LoadMenuW
LoadAcceleratorsW
CreateWindowExW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
SetWindowLongW
wvsprintfW
UnregisterClassW
GetWindowDC

gdi32

SetWindowOrgEx
GetMapMode
CreateSolidBrush
GetTextExtentPoint32W
SelectClipRgn
IntersectClipRect
GetTextMetricsW
ExcludeClipRect
Ellipse
Rectangle
PatBlt
ExtTextOutW
SetDIBColorTable
SetStretchBltMode
StretchBlt
CreatePen
MoveToEx
LineTo
GdiFlush
SetViewportOrgEx
SetMapMode
GetWindowExtEx
GetViewportExtEx
RectVisible
CreateCompatibleBitmap
BitBlt
CreateBitmap
CreatePatternBrush
SetBkColor
SetBrushOrgEx
CreateFontIndirectW
SetTextColor
SetBkMode
GetCurrentObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
GetObjectW
GetStockObject
SetPixel
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW

shell32

DragAcceptFiles
ShellExecuteW
SHCreateDirectoryExW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetFolderPathW

ole32

OleUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoCreateInstance

oleaut32

VarUI4FromStr

shlwapi

PathCanonicalizeW
PathAppendW
PathFileExistsW
PathIsDirectoryW
PathIsRelativeW

comctl32

ImageList_Destroy
InitCommonControlsEx
CreateStatusWindowW
ImageList_GetImageCount
ImageList_Create
ImageList_DrawIndirect
ord8
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize
ImageList_LoadImageW

Sections

.text
Size: 684KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

914475cc609fdc573ca62a482e85380c

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 684KB - Virtual size: 682KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 136KB - Virtual size: 133KB

.text
Size: 684KB - Virtual size: 682KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 136KB - Virtual size: 133KB