ea9ab3213de5823f51cf289460d1954b2c6c63978be3968b8b35a46f052005fe

Sharing

Copy URL Twitter E-mail

General

Target

ea9ab3213de5823f51cf289460d1954b2c6c63978be3968b8b35a46f052005fe
Size

204KB
MD5

a8651f1abe3facef65ed05b5cc996318
SHA1

5c1c900a0dc3045c6f1acfdb77907eb420344268
SHA256

ea9ab3213de5823f51cf289460d1954b2c6c63978be3968b8b35a46f052005fe
SHA512

adf681edac77b31e6d98b2ab4e2c53b9f7b9d747ac12a480ff3433ba06ddba56794e647e9068f7cc54e9425955d9ea888e4d1c64b92ddf2b17a4f6e000df9bb6
SSDEEP

3072:oUy2/suZqllHf1ri7cbBQ44DTNzAnOBmPcFIbliJeI/2FJ10UbwTog:oWnqP9OYbBuDiomPa/MJyKwc

Score

N/A

Malware Config

Signatures

Files

ea9ab3213de5823f51cf289460d1954b2c6c63978be3968b8b35a46f052005fe
.exe windows x86

9944af471a2e06a3e99aabc5dd2cd097

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfoA
SHGetDiskFreeSpaceA
SHGetDesktopFolder
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetFileInfoA
SHFileOperationA
SHGetDesktopFolder

advapi32

RegLoadKeyA
RegEnumKeyExA
RegDeleteValueA
RegEnumValueA

gdi32

GetPaletteEntries
CreateBitmap

msvcrt

exp
calloc
memcmp
rand
tan
rand
swprintf
tan
log10
strncmp
calloc
log
atan
memset

user32

GetIconInfo
CharToOemA
SetTimer
MapVirtualKeyA
EnumThreadWindows
EnableScrollBar
PeekMessageA
EnableWindow
GetScrollPos
GetMenuItemCount
MsgWaitForMultipleObjects
DrawFrameControl
GetSubMenu
GetParent
SetWindowPos
SetMenu
SetMenuItemInfoA
GetSystemMetrics
DestroyCursor
GetDC
DrawTextA
IsChild
CharLowerA
InsertMenuItemA
GetScrollRange

ole32

CoCreateGuid
CoReleaseMarshalData
StgCreateDocfileOnILockBytes
CreateBindCtx
CoRegisterClassObject
OleCreateStaticFromData
CoRegisterClassObject
OleRun
CoGetContextToken
CoGetObjectContext
CoRevokeClassObject
MkParseDisplayName
StgCreateDocfileOnILockBytes

comctl32

ImageList_Add
ImageList_DragShowNolock
ImageList_Draw
ImageList_GetBkColor
ImageList_Destroy
ImageList_Read
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_Write
ImageList_Read
ImageList_Add

comdlg32

GetOpenFileNameA
GetFileTitleA

version

GetFileVersionInfoA
VerInstallFileA
VerFindFileA

kernel32

GlobalAlloc
EnumCalendarInfoA
IsBadReadPtr
LoadLibraryExA
GetCurrentProcessId
CreateFileA
lstrcatA
GetLocaleInfoA
IsBadHugeReadPtr
LoadLibraryA
VirtualFree
GetCommandLineW
GetVersionExA
HeapDestroy
lstrcpynA
GetFullPathNameA
lstrlenW
GetTickCount
lstrcpyA
GetModuleFileNameA
GetACP
LocalReAlloc
GetModuleHandleA
GetProcAddress
SetEndOfFile
lstrlenA
GetCommandLineA
VirtualQuery
GetStringTypeW
GetSystemDefaultLangID
GetEnvironmentStrings
ExitProcess
EnterCriticalSection
ExitThread
ReadFile
CloseHandle
CompareStringA
FindClose
SetHandleCount
VirtualAllocEx
MoveFileA
GetProcessHeap
GetFileAttributesA
WriteFile
GetLastError
DeleteCriticalSection
VirtualAlloc
MulDiv
SetLastError
GetDiskFreeSpaceA
FreeLibrary
HeapDestroy
GetCurrentThread
ExitThread
SizeofResource
LocalAlloc
VirtualAlloc
SetLastError
lstrcmpA
lstrlenA
IsBadHugeReadPtr
DeleteCriticalSection
VirtualQuery
GetStdHandle
GetModuleHandleA
MoveFileExA
LoadResource
SetThreadLocale
GetSystemDefaultLangID
VirtualAllocEx
GetUserDefaultLCID
CreateEventA
GetModuleFileNameA
ReadFile
lstrcpyA
GetStringTypeW
GlobalAddAtomA
lstrcmpiA
GetProcAddress
GetCommandLineW
CloseHandle
GetACP
SetHandleCount
FindFirstFileA
GetDateFormatA
EnterCriticalSection
GetStartupInfoA
FreeResource
SetErrorMode
GetTickCount
CompareStringA
SetEndOfFile
CreateThread
GetFileType
RaiseException
SetFilePointer
GetModuleHandleW
FormatMessageA
GlobalAlloc
CreateFileA
GetVersionExA
GetStringTypeA
lstrcpynA
WaitForSingleObject
SetEvent

oleaut32

SysStringLen
GetErrorInfo
SafeArrayGetUBound
VariantCopyInd
SafeArrayPtrOfIndex

shlwapi

SHStrDupA
SHSetValueA
PathIsDirectoryA
SHEnumValueA
PathFileExistsA
SHQueryInfoKeyA
SHQueryValueExA
SHDeleteKeyA
SHGetValueA
PathGetCharTypeA

Sections

CODE
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1001B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9944af471a2e06a3e99aabc5dd2cd097

Headers

File Characteristics

Imports

shell32

advapi32

gdi32

msvcrt

user32

ole32

comctl32

comdlg32

version

kernel32

oleaut32

shlwapi

Sections

CODE Size: 92KB - Virtual size: 88KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 1001B

.bss Size: 8KB - Virtual size: 6KB

.ddata Size: 72KB - Virtual size: 68KB

.rsrc Size: 8KB - Virtual size: 7KB

CODE
Size: 92KB - Virtual size: 88KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 1001B

.bss
Size: 8KB - Virtual size: 6KB

.ddata
Size: 72KB - Virtual size: 68KB

.rsrc
Size: 8KB - Virtual size: 7KB