ea9079c3862a9b0b0b3d52eea5e074879685bffb956931c2f6fe904db8a4be82

Sharing

Copy URL Twitter E-mail

General

Target

ea9079c3862a9b0b0b3d52eea5e074879685bffb956931c2f6fe904db8a4be82
Size

72KB
MD5

529477b98d607b29b9d48297344b9b93
SHA1

1437fc05dc5965cc52fccb47d61adc1aa383735d
SHA256

ea9079c3862a9b0b0b3d52eea5e074879685bffb956931c2f6fe904db8a4be82
SHA512

af92ce17f626b508d3076c685adfcb002463b8a75f9117fc5801d2fc113f411f0ef818f8afaf44cd99fb62f921f5b19f62b107a49921e854d01c7b20d553aeaf
SSDEEP

1536:WzeqL9ihxoI+rtyWASIC4qrFfpFF60a8U3/HN1t8rn7IPCFiR3fsk6+/vmjof:Wz4hxoI+rty+IjqrLa8UvNzLPjfsXo

Score

N/A

Malware Config

Signatures

Files

ea9079c3862a9b0b0b3d52eea5e074879685bffb956931c2f6fe904db8a4be82
.exe windows x86

c778bcfb56c72d7b39ac2e740dea3018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

PropVariantClear
StgCreateDocfile
CoGetObjectContext
OleInitialize
StringFromGUID2
CoRevertToSelf
OleLoadFromStream
CoCreateGuid
OleTranslateAccelerator
StgCreateDocfileOnILockBytes
ReleaseStgMedium
StgOpenStorage
CoUninitialize
CoMarshalInterThreadInterfaceInStream
OleUninitialize
CoGetInterfaceAndReleaseStream
CoUnmarshalInterface
CoReleaseMarshalData
CLSIDFromString
GetHGlobalFromStream
GetRunningObjectTable
CoTaskMemFree

version

GetFileVersionInfoA
GetFileVersionInfoW
GetFileVersionInfoSizeA

user32

EnumChildWindows
SendDlgItemMessageA
PeekMessageA
SystemParametersInfoW
GetProcessWindowStation
ScreenToClient
GetPropA
GetSysColorBrush
SetRect
DestroyWindow
CharUpperW
IntersectRect
WinHelpW
IsMenu
wsprintfA
LoadCursorA
GetActiveWindow
GetFocus
MoveWindow
CreateWindowExA
GetWindowLongW
GetCursorPos
GetSysColor
SetMenu
PostQuitMessage
GetWindowPlacement
GetClassNameW
BeginPaint
ChangeMenuW
GetDlgItem
GetDC
GetCapture
EqualRect
SetForegroundWindow
DrawFocusRect
SetDlgItemTextW
EnableWindow

comctl32

InitCommonControls
ImageList_Create
ImageList_ReplaceIcon
CreatePropertySheetPageW
ImageList_Draw

advapi32

RegQueryValueW
ConvertStringSidToSidW
RegEnumKeyW
SetEntriesInAclW
RegQueryValueExA
OpenSCManagerA
GetSecurityDescriptorDacl
OpenServiceW
RegEnumValueW
InitializeAcl
EqualSid
RegCreateKeyExW
IsValidSecurityDescriptor
GetTraceEnableLevel
GetLengthSid
StartServiceW
RegisterTraceGuidsW
InitializeSecurityDescriptor
UnregisterTraceGuids
OpenServiceA
CheckTokenMembership
InitializeSid
RegFlushKey
RegQueryValueExW
RegDeleteValueW
SetSecurityDescriptorDacl
RegSetValueExW
RegOpenKeyA

msvcrt

_stricmp
iswalpha
_unlock
_isatty
wcsncmp
toupper
_itow
__CxxFrameHandler
isdigit
_wcslwr
time
_wsplitpath
bsearch
_except_handler3
__set_app_type
??3@YAXPAX@Z
strncpy
iswspace
??1type_info@@UAE@XZ
wcsncpy

kernel32

DeleteCriticalSection
lstrlenW
GetFileAttributesA
TlsGetValue
HeapDestroy
EnterCriticalSection
MapViewOfFile
lstrcpynA
InitializeCriticalSectionAndSpinCount
ResetEvent
GetFileSize
GetLocaleInfoW
GetCurrentProcess
CompareStringA
ExitProcess
InterlockedCompareExchange
FileTimeToLocalFileTime
GlobalFree
VirtualAlloc
lstrcatA
GetModuleFileNameW
CreateEventA
GetLastError
OpenProcess
SetFileAttributesW

rpcrt4

RpcRaiseException
RpcStringBindingComposeW
RpcRevertToSelf
NdrDllUnregisterProxy
NdrOleAllocate
RpcStringFreeA
NdrStubForwardingFunction
RpcStringBindingParseW
RpcServerUseProtseqEpW
CStdStubBuffer_AddRef
RpcBindingSetAuthInfoW
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
RpcBindingFree
CStdStubBuffer_DebugServerQueryInterface
RpcBindingVectorFree
NdrDllCanUnloadNow
CStdStubBuffer_IsIIDSupported

Sections

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 39KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c778bcfb56c72d7b39ac2e740dea3018

Headers

File Characteristics

Imports

ole32

version

user32

comctl32

advapi32

msvcrt

kernel32

rpcrt4

Sections

.rdata Size: 6KB - Virtual size: 5KB

.text Size: 10KB - Virtual size: 9KB

DATA Size: 1KB - Virtual size: 1KB

BSS Size: 14KB - Virtual size: 28KB

.idata Size: 39KB - Virtual size: 84KB

.rdata
Size: 6KB - Virtual size: 5KB

.text
Size: 10KB - Virtual size: 9KB

DATA
Size: 1KB - Virtual size: 1KB

BSS
Size: 14KB - Virtual size: 28KB

.idata
Size: 39KB - Virtual size: 84KB