7dd9600bee82a0701d9f3190997bc0b27d8d6848220ec4be9503d52154d1eaa9

Sharing

Copy URL Twitter E-mail

General

Target

7dd9600bee82a0701d9f3190997bc0b27d8d6848220ec4be9503d52154d1eaa9
Size

146KB
MD5

cfd568565023d72f7beeacaf0e17c305
SHA1

b9609d68846ec57300fa06ed6fd2b45fa8679b56
SHA256

7dd9600bee82a0701d9f3190997bc0b27d8d6848220ec4be9503d52154d1eaa9
SHA512

200ddba364aa5ad9923dedcc80e26c96c0f7911c7624ef90edf4027b2b43e65fde16cb1306f5a084ea378bd026a808d56be6c0dc308eedbfb77d02fdd95da741
SSDEEP

3072:GU2Fne8WUr+MmQcD4YqwmgEFLsfiPUmofDDEFL2nP:67WUr+FQcD+woFLsKcmofDxn

Score

N/A

Malware Config

Signatures

Files

7dd9600bee82a0701d9f3190997bc0b27d8d6848220ec4be9503d52154d1eaa9
.exe windows x86

51f2436e711903319c0424743b23bcea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

wcsncmp
_vsnprintf

shlwapi

StrFormatKBSizeW
PathCanonicalizeA
StrFormatByteSizeW
PathStripToRootA

shell32

ord750

kernel32

GetProfileIntW
SetCommBreak
SetFileTime
TlsGetValue
FatalAppExitW
CreateEventW
CancelIo
QueueUserWorkItem
CancelTimerQueueTimer
RequestDeviceWakeup
OpenEventW
SetupComm
SetVolumeLabelA
FileTimeToDosDateTime
lstrcpyA
GetDiskFreeSpaceExW
SetProcessWorkingSetSize
lstrlenW
LoadLibraryW
OpenFileMappingW
lstrcmpiA
ConnectNamedPipe
SetMailslotInfo
SetHandleCount

user32

DestroyAcceleratorTable
InvertRect
EnumPropsW
GetWindow
LookupIconIdFromDirectory
GetDlgItemTextA
DlgDirListW
GetSystemMetrics
ReleaseCapture
DeregisterShellHookWindow
TileWindows
IntersectRect
LockWindowUpdate
GetDC
DialogBoxIndirectParamW
LoadImageW
GetWindowDC
VkKeyScanExW
SetCursor
IsCharUpperA
RealGetWindowClassW
LoadMenuIndirectA
GetRawInputData
TabbedTextOutW
CreateAcceleratorTableW
DrawTextExA
TranslateMessage
EnumPropsA
PeekMessageW
GetListBoxInfo
GetMenuContextHelpId
ShowScrollBar
PostThreadMessageW
MessageBoxW
MapWindowPoints
ExcludeUpdateRgn
DispatchMessageW
GetClassNameA
GetClientRect
ExitWindowsEx

gdi32

TextOutW
ResetDCW
SetMapMode
SetAbortProc
DeleteEnhMetaFile
ScaleWindowExtEx
CreateBitmapIndirect
GetTextExtentPointI
GetTextExtentPointW
GetMetaRgn
OffsetClipRgn
GetOutlineTextMetricsA
SetMetaFileBitsEx
AnimatePalette
GetLayout
GetBitmapBits
GetBrushOrgEx

advapi32

AddAce
CopySid
IsValidAcl
AddAuditAccessAceEx

Exports

Exports

__GetScrollRange@12

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bmem
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedat
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51f2436e711903319c0424743b23bcea

Headers

File Characteristics

Imports

ntdll

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.extext Size: 3KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.bmem Size: 512B - Virtual size: 162B

.sedat Size: 512B - Virtual size: 484B

.rsrc Size: 125KB - Virtual size: 124KB

.reloc Size: 1024B - Virtual size: 886B

.text
Size: 11KB - Virtual size: 10KB

.extext
Size: 3KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.bmem
Size: 512B - Virtual size: 162B

.sedat
Size: 512B - Virtual size: 484B

.rsrc
Size: 125KB - Virtual size: 124KB

.reloc
Size: 1024B - Virtual size: 886B