Sample details: dd604796d0a784589f06f4a9432cef73 --

Hashes
MD5: dd604796d0a784589f06f4a9432cef73
SHA1: 26bc13c6355998ac67dbf0630c2c84f07cc38903
SHA256: b3c2f06571bffc7f3012ac25489b90619840eed4028b6b650cade6143adef3a8
SSDEEP: 1536:P2nJuJ2emauyW+WCUbTuA6GdiX1MoGJtIcapJ3xtwWDk3qD9e7+yp/DJ/:P2nJuYeIakcVX1MJ07BVkp/DJ
Details
File Type: PE32
Yara Hits
YRP/IsPE32 | YRP/IsWindowsGUI | YRP/HasDebugData | YRP/HasRichSignature | YRP/maldoc_getEIP_method_1 | YRP/domain | YRP/contentis_base64 |
Source
http://dougsunlimited.com/pAkTdm
http://dougsunlimited.com/pAkTdm/
Strings
          	            !This program cannot be run in DOS mode.
'RichYD
`.rdata
@.data
@.reloc
D$$`@,?
D$0n8:)
t$hi|$P
T$4#T$4
|$,WyX_uk
L$@=PE
L$'*D$W
Uhm1IdIW
VHtTHVZWw
a5JAQscnAG
%d%d%d
R288I9I4ao
yYaMQ.pdb
sprintf
ntdll.dll
timeGetSystemTime
WINMM.dll
wprintf
msvcrt.dll
IsClipboardFormatAvailable
DialogBoxParamA
GetCaretBlinkTime
LoadIconA
GetIconInfo
GetCursorPos
GetWindow
GetCursor
GetCapture
GetWindowTextA
EndDialog
CreateDialogParamA
USER32.dll
VerLanguageNameA
ReadFile
GetLastError
GetEnvironmentStrings
FreeEnvironmentStringsA
lstrcmpA
CreateFileW
GetSystemTimeAdjustment
lstrcatA
lstrcmpiA
GlobalAlloc
KERNEL32.dll
Y!-	3?c
CIrgG>
Z7*CIbgG
3"HwG[T
'HQeN:k
~+%v!*
(FtK{R
z-' 31S
K]U#(>
}]U#(>
]U#'~C
/H\@T(>
Z7*gIbo
-|Ly#ky
9ZT"(>
QX\=B[Ii
W/wl^`/e
UWCKrzj
mG>F[T}
Iz7O!k
N0>beUs
'MT"(>
ZkYx?c
7-	9?c
stm	3\c
<-	8?c
`@-	9?c
Fum	9fc
GF-	>?c
~BH\_#
S\U#iQ
2R-	8?c
2	3?b:
?XH\]#
f-	8?c
2	3?b:
&as?y1
xu-	9?c
Fcs?/<
m~-	8?c
M4t >7
M4'/>7
M4P:>7
O\U#5U
M48A>7
=	3?h?
M4LL>7
nIJy%+7$
KvK\Uy
C[jF`Y
Iyy(-	
I\U#(V
t_~X^U#
wytVH\
h]-)3?
geM/F.
gwb*>B^
iT7?Yu
Z	0lQh@
MQ!<3so
-TN9=s~
ySM>_t
UX)C;zw
4\UAD{
eN-	3?c
{gAe%zp$iM
@.C+S\
Zb10ossE
{:8I[hKn
h=PYd9
GXs<GP{
	[NuSV0i
PRm/@2|
5 ip(w
I'w BC
?wI9@2<b%
j"sr?C
v>z.M|${
Z5dJ?7c|Y
Rm/@2|
sdB\^FEJ
_@gILw
?;0OvS7
-Do88U
*y]L?^5
-<w8HI
x#C)O2
rv[4TY|
8FwU{/
>zd&+=
<wP=UWg?
?;G]BU"
jvu0D4
y9od!u
?;GF~`7
W.Eczj
9>Zt0s<g
:f@hzj
^j3>nD
JAN5@.1
395>%[
8F?Kw/
<wUY]#3
J{[N@Gn%
7-F<&g
r*OS#p
4im!c5
|8xiMH
!bR}l:
!iJi)c!D
4[<\MnV
f}~a&h
+h@KU?
O=0{'q
@m.:C6
rkv\ [jQ9
;G]ZEb
%J4wTQ
]IJML6C_
:-"Kb 
"~4~I6
/wUy5wgH
l\XS7|
StLF?F
_T#p%3ye>
oGm9+b
lB\]sDb-
\KEk9?
~Ki.w.
G-7DR"on
Q9IbcB
&)rBw	~
(3NIJJ
nk^dsw
9Rm/@2|
':{[N@Gn
{|BpDE
@;x[p?
wM4&C{1
5WT6~V\
-N1S#p
KGSic_C
=iCg'|r&lP
1R5W't
FBNd^Z>
;gAeE5p$i
-N1S#p
~jz:nD
?;G]WS7
IA?(9+
8a%,Nx
3,474{4
= =&=,=2=8=>=D=J=P=V=\=b=h=n=t=z=
\4`4d4
4p5t5x5
>8>$?(?,?L?
80<0@0`0L1P1T1t1`2d2h2
2t3x3|3