cb5cd66f3956122a12b50ef1834007b18ceabde96140b335e5b805730dcfcfd4

Sharing

Copy URL Twitter E-mail

General

Target

cb5cd66f3956122a12b50ef1834007b18ceabde96140b335e5b805730dcfcfd4
Size

234KB
MD5

c7dc577fa10ce2e5029c4ec4b817a697
SHA1

fe3ccd531d7514adf61ee996cda47a2bb3989188
SHA256

cb5cd66f3956122a12b50ef1834007b18ceabde96140b335e5b805730dcfcfd4
SHA512

d752c0aa1eb9f700ad56fedb907d1ea5d55ef532c3d81c705c349a436d2712a2bf7939eff44930a6ed644c58668b27effd3bd3cd1c614e129748980393baa19a
SSDEEP

3072:6ywt21MbQk96JqzOVNavAZ23G1jpZ6RItijYaZlLwb58OTDsgM:twtVbQkEJLVNavAj00isaZlLZO

Score

N/A

Malware Config

Signatures

Files

cb5cd66f3956122a12b50ef1834007b18ceabde96140b335e5b805730dcfcfd4
.dll windows x86

d0b2f1e89c652442d6d18b7c1f9f786a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerInstallFileA

shell32

Shell_NotifyIconA

advapi32

RegEnumValueA

user32

SendMessageW
RegisterWindowMessageA
PostQuitMessage
OemToCharA
RegisterClassA
RedrawWindow
ReleaseCapture
LoadKeyboardLayoutA
ScreenToClient
MessageBeep
OpenClipboard
MapVirtualKeyA
SetActiveWindow
OffsetRect
MapWindowPoints
RegisterClipboardFormatA
PeekMessageA
LoadBitmapA
PostMessageA
RemovePropA
LoadCursorA
MessageBoxA
PeekMessageW
LoadIconA
ScrollWindow
ReleaseDC
SendMessageA
LoadStringA
PtInRect
RemoveMenu

kernel32

LoadLibraryExA
VirtualAllocEx
IsBadHugeReadPtr
GetOEMCP
GetModuleHandleA
LoadLibraryA
lstrlenA
ExitProcess
ExitThread
GetLastError
GetVersionExA
GetCommandLineW
GetProcAddress

gdi32

SetBkColor
SelectObject

Sections

CODE
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0b2f1e89c652442d6d18b7c1f9f786a

Headers

File Characteristics

Imports

version

shell32

advapi32

user32

kernel32

gdi32

Sections

CODE Size: 59KB - Virtual size: 58KB

.rdata Size: 2KB - Virtual size: 122KB

.data Size: 157KB - Virtual size: 157KB

.cdata Size: 1KB - Virtual size: 1KB

DATA Size: 8KB - Virtual size: 7KB

.ddata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 836B

.reloc Size: 1KB - Virtual size: 1KB

CODE
Size: 59KB - Virtual size: 58KB

.rdata
Size: 2KB - Virtual size: 122KB

.data
Size: 157KB - Virtual size: 157KB

.cdata
Size: 1KB - Virtual size: 1KB

DATA
Size: 8KB - Virtual size: 7KB

.ddata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 836B

.reloc
Size: 1KB - Virtual size: 1KB