b64c8cd88d7abf25279b95629329de5eb04e00fdd1a1c9ba7350bb13b83a7c78

Sharing

Copy URL Twitter E-mail

General

Target

b64c8cd88d7abf25279b95629329de5eb04e00fdd1a1c9ba7350bb13b83a7c78
Size

314KB
MD5

fe8b6d534a2b26f1ca7b20bb2411ec91
SHA1

38a30223c2037128717037281c4d35ec9be8b59a
SHA256

b64c8cd88d7abf25279b95629329de5eb04e00fdd1a1c9ba7350bb13b83a7c78
SHA512

bc9a588df8e390510965c6635e616b8302a67992a678897faad4bd0f0437f7f6237c1604eaf131e306552a76eb5bfc7c840758b88f70ed511ca5cb3e6deb4347
SSDEEP

3072:P8k/TMYQ0qIN6NtVcOXEK5ULDGyUPj09vJqxEm4x1ESuQG+3SeyRS6CSfKVu1xgP:5Mnt3EPXAPj2voxEvTEPp/F

Score

1^/10

Malware Config

Signatures

Files

b64c8cd88d7abf25279b95629329de5eb04e00fdd1a1c9ba7350bb13b83a7c78
.exe windows x64

a7a19cad0c2c193feb43fc00c1b6b502

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
EventWrite
EventRegister
EventUnregister
RegCreateKeyExW
RegSetValueExW

kernel32

GetLastError
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
LocalFree
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateMutexW
GetTickCount64
VerifyVersionInfoW
VerSetConditionMask
MulDiv
CloseHandle
GetCurrentProcessId

gdi32

Polyline
SetBkColor
CreateSolidBrush
CreatePen
DeleteObject
GetDeviceCaps
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
SelectObject
GdiAlphaBlend
BitBlt
DeleteDC
GetStockObject
GdiSetBatchLimit
SetTextColor
GetTextMetricsW
PatBlt
CreateCompatibleBitmap
SetStretchBltMode
StretchBlt
SetBkMode

user32

IsDlgButtonChecked
CheckRadioButton
EnumDisplaySettingsW
EnumDisplayDevicesW
ChangeDisplaySettingsExW
GetSysColor
CopyImage
LoadBitmapW
DestroyWindow
CreateWindowExW
DrawTextW
CheckDlgButton
MapWindowPoints
FillRect
RedrawWindow
IsCharAlphaNumericW
MessageBoxW
SystemParametersInfoW
SetFocus
SetWindowLongW
GetParent
PostMessageW
EnableWindow
ShowWindow
DialogBoxParamW
KillTimer
SetTimer
EndDialog
SetForegroundWindow
FindWindowW
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowTextW
SendMessageW
EndPaint
GetSysColorBrush
FrameRect
BeginPaint
DrawFocusRect
GetWindowLongW
GetFocus
InvalidateRect
SetWindowLongPtrW
SetDlgItemTextW
GetDlgItem
GetClientRect
MapDialogRect
SendDlgItemMessageW
SendMessageTimeoutW
SetWindowPos
PtInRect
GetWindowRect
GetSystemMetrics
GetProcessDefaultLayout
ReleaseDC
LoadStringW
GetDC
GetWindowLongPtrW
TrackMouseEvent

msvcrt

_wtoi
__set_app_type
_fmode
memcpy
__setusermatherr
_amsg_exit
_initterm
memset
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_commode
_acmdln
exit
_cexit
memcmp
_vsnwprintf
_purecall
free
realloc
wcschr
??0exception@@QEAA@AEBQEBDH@Z
?what@exception@@UEBAPEBDXZ
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_callnewh
malloc
_CxxThrowException
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ

ntdll

WinSqmAddToStream
WinSqmIncrementDWORD

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiOpenDeviceInterfaceW

uxtheme

CloseThemeData
GetThemeSysFont
GetThemeSysColor
GetThemeColor
GetThemeFont
OpenThemeData
IsThemeActive
DrawThemeParentBackground

oleacc

CreateStdAccessibleObject
LresultFromObject

ole32

CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
StringFromGUID2
CoGetObject
CoCreateInstance

oleaut32

SafeArrayGetLBound
SysAllocString
SysFreeString
SafeArrayGetUBound
SafeArrayGetElement
VariantInit
VariantClear

comctl32

PropertySheetW
ord381
InitCommonControlsEx

dwrite

DWriteCreateFactory

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7a19cad0c2c193feb43fc00c1b6b502

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

setupapi

uxtheme

oleacc

ole32

oleaut32

comctl32

dwrite

Sections

.text Size: 73KB - Virtual size: 72KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 236KB - Virtual size: 236KB

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 73KB - Virtual size: 72KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 236KB - Virtual size: 236KB

.reloc
Size: 1024B - Virtual size: 1024B