d3b6dfd9533d036ce3d18797ba15a70559a8b0b9748c1dbc0963bc20b7509fdb

Sharing

Copy URL Twitter E-mail

General

Target

d3b6dfd9533d036ce3d18797ba15a70559a8b0b9748c1dbc0963bc20b7509fdb
Size

188KB
MD5

154616865699b009244ec6304910d4de
SHA1

816e90628ed0171c1db9bae27f18265fd09b9ddb
SHA256

d3b6dfd9533d036ce3d18797ba15a70559a8b0b9748c1dbc0963bc20b7509fdb
SHA512

be743cb395340b6b6ee39a9f06f09e1edf2bd0b3cb83f95847458acfeea3f82658945044a62a203868888003537c6795249b849d22e1ae9855d10cfa5aad9f8c
SSDEEP

3072:QLYCxDGxoKTRrqevX8gfj+W6FxWtNpFcoJghKUv/Q2tKqIMaqAb:QLHDgo6q096T6TMv/QaCq

Score

N/A

Malware Config

Signatures

Files

d3b6dfd9533d036ce3d18797ba15a70559a8b0b9748c1dbc0963bc20b7509fdb
.exe windows x86

a849e7ec4e408bbe464ee31dd550e5b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

comdlg32

FindTextA
GetSaveFileNameA
GetFileTitleA
ChooseColorA
GetOpenFileNameA

user32

CharUpperBuffA
GetKeyboardLayout

kernel32

VirtualAlloc
VirtualAllocEx
LoadLibraryA
LocalAlloc
GetModuleHandleA
GetCommandLineW
GetProcAddress
IsBadReadPtr
lstrlenA
GetVersionExA
ExitProcess

ole32

CreateStreamOnHGlobal

advapi32

RegEnumKeyA
GetUserNameA
RegOpenKeyA

shlwapi

SHSetValueA
SHEnumValueA
SHDeleteKeyA
PathGetCharTypeA
SHQueryInfoKeyA
SHStrDupA
PathIsDirectoryA
SHDeleteValueA

gdi32

SaveDC
CopyEnhMetaFileA
CreatePenIndirect
GetDCOrgEx
SetBkMode
BitBlt
GetRgnBox
CreateCompatibleBitmap

msvcrt

exp
strncmp
swprintf

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES74
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES42
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES08
Size: 512B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES89
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES61
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES34
Size: 1024B - Virtual size: 603B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES13
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES90
Size: 1024B - Virtual size: 873B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a849e7ec4e408bbe464ee31dd550e5b5

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

ole32

advapi32

shlwapi

gdi32

msvcrt

Sections

.text Size: 18KB - Virtual size: 17KB

DATA Size: 159KB - Virtual size: 158KB

RES74 Size: 512B - Virtual size: 52B

RES42 Size: 1KB - Virtual size: 1KB

RES08 Size: 512B - Virtual size: 48KB

RES89 Size: 1024B - Virtual size: 522B

RES61 Size: 1KB - Virtual size: 1KB

RES34 Size: 1024B - Virtual size: 603B

RES13 Size: 1024B - Virtual size: 718B

RES90 Size: 1024B - Virtual size: 873B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

DATA
Size: 159KB - Virtual size: 158KB

RES74
Size: 512B - Virtual size: 52B

RES42
Size: 1KB - Virtual size: 1KB

RES08
Size: 512B - Virtual size: 48KB

RES89
Size: 1024B - Virtual size: 522B

RES61
Size: 1KB - Virtual size: 1KB

RES34
Size: 1024B - Virtual size: 603B

RES13
Size: 1024B - Virtual size: 718B

RES90
Size: 1024B - Virtual size: 873B

.rsrc
Size: 2KB - Virtual size: 2KB