40bf5488145c95ed7a3ea76925feee8973e47b02cba662b60a2b60863ffb9a4b

Sharing

Copy URL Twitter E-mail

General

Target

40bf5488145c95ed7a3ea76925feee8973e47b02cba662b60a2b60863ffb9a4b
Size

118KB
MD5

22a4e3e29fdfeaa7fbdbfaaca5aa2e88
SHA1

b6427300d256def59d8d291a85a1c9b3db2441fb
SHA256

40bf5488145c95ed7a3ea76925feee8973e47b02cba662b60a2b60863ffb9a4b
SHA512

0cea86a0e9d5e824989d6d0752d2ecfe026817c7230c8cc7f52c152383b775f5aa99bf9043004f291f78b7b4e99fe110073e1b40500eff6be5a66ae1cd582d1a
SSDEEP

3072:I50kPMfWgEUfJ4588A0LmYh7Seoco2o/WtmSoWKMMiU1m9:I5/MfWryg7SeofR/tWKNP

Score

N/A

Malware Config

Signatures

Files

40bf5488145c95ed7a3ea76925feee8973e47b02cba662b60a2b60863ffb9a4b
.exe windows x86

d94186f5f6edc9a6439aae9b03e367bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopyInd
VariantClear
SysStringLen
SysFreeString
SysAllocStringLen

advapi32

RegCloseKey
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegLoadKeyA

ole32

ReadClassStg
OleUninitialize
OleSetClipboard
OleInitialize
OleFlushClipboard
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoUninitialize
CoTaskMemAlloc
CoRevokeClassObject
CoCreateGuid
CoLockObjectExternal
CoInitialize
CoGetMalloc
CoGetClassObject
CoCreateInstance
StringFromGUID2

user32

ToAscii
OemToCharW
MessageBoxIndirectA
MessageBoxA
MessageBeep
EndPaint
EnableScrollBar
CreateAcceleratorTableA
CharUpperBuffA
wsprintfA

shell32

SHBindToParent
SHFileOperationA
SHGetMalloc
SHGetFileInfoA

shlwapi

PathQuoteSpacesA
PathMatchSpecA
PathIsRootA
PathIsRelativeA
PathIsDirectoryA
PathFindFileNameA
PathFindExtensionA
PathFileExistsA
PathCompactPathExA
PathCanonicalizeA
StrStrIA
StrChrA
SHAutoComplete
PathUnquoteSpacesA

msvcrt

rand
strcmp
memchr
malloc
getenv
_except_handler3
free
fflush

kernel32

lstrcatA
SetLastError
RtlUnwind
RaiseException
InterlockedIncrement
HeapAlloc
GetStartupInfoA
GetOEMCP
GetModuleHandleA
GetLastError
GetCommandLineA
GetACP
ExitProcess
EnumResourceTypesA
CloseHandle
VirtualFree

Exports

Exports

Aadhffoy
Eaugbhngj
Ecczfdii
Ejweuw
Lzoey
Mvuq
Nzqkymptzx
Qstln
Rucrt
Sokau
Sxrxwvayt
Uk

Sections

.text
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d94186f5f6edc9a6439aae9b03e367bb

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 28KB

.rdata Size: 32KB - Virtual size: 36KB

.data Size: 33KB - Virtual size: 36KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 24KB - Virtual size: 28KB

.rdata
Size: 32KB - Virtual size: 36KB

.data
Size: 33KB - Virtual size: 36KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 28KB