eae6412cb8fd0b98b4fe678c631152d1b74faca1f36d6f6c0281fda689de7fb2

Sharing

Copy URL

Twitter E-mail

General

Target

eae6412cb8fd0b98b4fe678c631152d1b74faca1f36d6f6c0281fda689de7fb2
Size

233KB
MD5

4de52b0e354138936809ec602f5a1889
SHA1

5f472ca0e57582c82502c2b9c0db8a91c208c664
SHA256

eae6412cb8fd0b98b4fe678c631152d1b74faca1f36d6f6c0281fda689de7fb2
SHA512

38e3d1ae0d6934b6c71504f5c4a4cabf4a279c86af7ea7d3f9acba5f0c462d2e3839226ea237f36b7dfd82c2e214f95ccb5b395994b6682cb9f2590784053910
SSDEEP

6144:eoP7ph/0GzA8DGZJK9Uae1paOEdpPOXMt6ONoJQ:eoP7phzA8DC/UbhOJQ

Score

N/A

Malware Config

Signatures

Files

eae6412cb8fd0b98b4fe678c631152d1b74faca1f36d6f6c0281fda689de7fb2
.dll windows x86

36247f41286884c6798bf13c6bd8e1ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetContextToken
StgCreateDocfileOnILockBytes

kernel32

MoveFileA
GetDateFormatA
VirtualAlloc
IsBadReadPtr
LocalAlloc
ResetEvent
SetEndOfFile
GetLastError
ReadFile
LoadLibraryA
GetCommandLineW
GetModuleHandleA
ExitThread
ExitProcess
GetVersionExA
GetProcAddress
GetACP
GlobalAlloc

msvcrt

wcsncmp
pow
srand
_acmdln
cos
rand
wcscspn

user32

GetKeyNameTextA
GetKeyState
GetIconInfo

shell32

SHGetFolderPathA
SHGetFileInfoA
SHFileOperationA

gdi32

BitBlt
GetClipBox

comdlg32

FindTextA

shlwapi

SHEnumValueA
SHDeleteKeyA
PathGetCharTypeA
PathIsDirectoryA
SHQueryValueExA
SHGetValueA
SHQueryInfoKeyA
PathIsContentTypeA

comctl32

ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Create
ImageList_Write

advapi32

RegDeleteKeyA
GetUserNameA
RegEnumKeyA
RegEnumValueA

oleaut32

SafeArrayPtrOfIndex
GetErrorInfo
VariantChangeType
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayGetElement
RegisterTypeLib
SafeArrayCreate

version

GetFileVersionInfoSizeA
VerFindFileA

Sections

CODE
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 158KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36247f41286884c6798bf13c6bd8e1ba

Headers

File Characteristics

Imports

ole32

kernel32

msvcrt

user32

shell32

gdi32

comdlg32

shlwapi

comctl32

advapi32

oleaut32

version

Sections

CODE Size: 57KB - Virtual size: 57KB

.rdata Size: 1024B - Virtual size: 734B

.data Size: 8KB - Virtual size: 8KB

.adata Size: 1024B - Virtual size: 748B

.gdata Size: 158KB - Virtual size: 226KB

.bdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 996B

.reloc Size: 1KB - Virtual size: 1KB

CODE
Size: 57KB - Virtual size: 57KB

.rdata
Size: 1024B - Virtual size: 734B

.data
Size: 8KB - Virtual size: 8KB

.adata
Size: 1024B - Virtual size: 748B

.gdata
Size: 158KB - Virtual size: 226KB

.bdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 996B

.reloc
Size: 1KB - Virtual size: 1KB