ca91d625f9a2174e6f268e62aaa210d178914aea05c4db3b27e9b4c0486c15a4

Sharing

Copy URL Twitter E-mail

General

Target

ca91d625f9a2174e6f268e62aaa210d178914aea05c4db3b27e9b4c0486c15a4
Size

94KB
MD5

74345a5e5023110544eeab24fc2a2b53
SHA1

59f78888274191aabbc498c8d36b81c04da18e54
SHA256

ca91d625f9a2174e6f268e62aaa210d178914aea05c4db3b27e9b4c0486c15a4
SHA512

92df5ca90e9173601faad51995ab075cc4d8edb58cb17b9afb125c3079d69a96de69ff3ba406ee7064effd1ee95d3c3c0d17e4354f315b89142de1a0dc8d2310
SSDEEP

1536:w39gcvK9d8xpOcBebSH8cCBUOCak+OMA5f5OTqsVWA9NmNwfWBDPiMtFihy:w395vK9d2EoemH8cRPXMi8qsRgNwfWBJ

Score

N/A

Malware Config

Signatures

Files

ca91d625f9a2174e6f268e62aaa210d178914aea05c4db3b27e9b4c0486c15a4
.exe windows x86

4edc75adcee2de1245d4abd1a177d421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDCOrgEx
GetTextExtentPoint32A
AngleArc
SelectPalette
ExtTextOutA
BitBlt
ExtSelectClipRgn
SetDIBits
SetROP2
GetViewportExtEx
GetTextExtentPoint32W
CombineRgn
GetNearestColor
RestoreDC
PlayMetaFile
SetMapMode
StretchDIBits
GetTextExtentPointA
CloseMetaFile
SetBrushOrgEx
PlayMetaFileRecord
FillRgn
DeleteObject
GetSystemPaletteEntries
DeleteMetaFile
ScaleWindowExtEx
CreateFontW
SetRectRgn
PolyBezierTo

kernel32

ExitProcess
VirtualAlloc
GetCPInfo

version

GetFileVersionInfoA
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
VerQueryValueA

msvcrt

_adjust_fdiv
strncat
strtol
wprintf
__set_app_type
fputs
__setusermatherr
isxdigit
_open_osfhandle
_CxxThrowException
_itoa
wcstoul
_wfopen
_lock
wcscmp
_strnicmp
_onexit
calloc
mbstowcs
_wcsdup
_beginthread
_dup
iswctype
_purecall
__p__commode
_fileno
wcsncpy
ftell
ctime
__p__fmode
_except_handler3
__p___initenv
gmtime
memmove
_tzset
_initterm
swscanf

advapi32

RegEnumKeyExW
GetTokenInformation
RegEnumKeyExA
LookupPrivilegeValueA
ChangeServiceConfigA
RegSetValueExW
FreeSid
RegDeleteValueA
LookupAccountSidW
GetSecurityDescriptorControl
CloseServiceHandle
InitializeAcl
LockServiceDatabase
RegQueryValueExW
RegOpenKeyW
RegDeleteValueW
UnlockServiceDatabase
RegEnumValueW
AllocateAndInitializeSid
EqualSid

comctl32

CreatePropertySheetPageA
PropertySheetW
ImageList_ReplaceIcon
PropertySheetA
ImageList_Destroy
ImageList_AddMasked
InitCommonControlsEx
CreateToolbarEx
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_Create

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4edc75adcee2de1245d4abd1a177d421

Headers

File Characteristics

Imports

gdi32

kernel32

version

msvcrt

advapi32

comctl32

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 30KB - Virtual size: 75KB

.idata Size: 11KB - Virtual size: 22KB

.rsrc Size: 17KB - Virtual size: 17KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 30KB - Virtual size: 75KB

.idata
Size: 11KB - Virtual size: 22KB

.rsrc
Size: 17KB - Virtual size: 17KB