c62cd1a90cc59cb1167e12963b0097e2aebbd712cc224520b2561258ccd6fcbf

Sharing

Copy URL Twitter E-mail

General

Target

c62cd1a90cc59cb1167e12963b0097e2aebbd712cc224520b2561258ccd6fcbf
Size

268KB
MD5

cf39b1617d12de8018bd0588eabd755e
SHA1

0ebaffaf27f1508466e05fb5dcb4f346ba07aba9
SHA256

c62cd1a90cc59cb1167e12963b0097e2aebbd712cc224520b2561258ccd6fcbf
SHA512

ae7681e88d0ccc247e336ad01586f85d5514fd83fad7d4aa1530986378be72fa3143f5bc5959a43b3251c5d4de740cb442ad91f12c7f4c89971c72a4c709d8d6
SSDEEP

6144:GcW4I8upYtBkpbZ+REUraC6ShGOmKpEMEA+G:GUI9WBS+DrflGOmUh

Score

N/A

Malware Config

Signatures

Files

c62cd1a90cc59cb1167e12963b0097e2aebbd712cc224520b2561258ccd6fcbf
.dll windows x86

c8e74a361b67e0efbb5444454d69c263

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

SetCapture

comctl32

ImageList_Create
ImageList_GetBkColor
ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Draw
ImageList_Add

advapi32

RegCreateKeyExA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA

shlwapi

PathIsDirectoryA
PathIsContentTypeA
SHQueryValueExA
SHEnumValueA
SHSetValueA
SHDeleteValueA
SHGetValueA
SHStrDupA
SHQueryInfoKeyA

gdi32

RestoreDC
SelectPalette
BitBlt
GetPixel
GetDCOrgEx
GetDIBColorTable

kernel32

VirtualAlloc
GetModuleHandleW
ExitProcess
LoadLibraryExA
SetErrorMode
SetFilePointer
ExitThread
GetLastError
ResetEvent
GetProcAddress
ReadFile
SetEndOfFile
GetModuleHandleA
GetOEMCP
SetEvent
IsBadReadPtr
GetACP
SetHandleCount

shell32

SHGetFileInfoA
SHGetDiskFreeSpaceA
SHFileOperationA
DragQueryFileA
SHGetSpecialFolderLocation

Sections

CODE
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 875B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 4KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8e74a361b67e0efbb5444454d69c263

Headers

File Characteristics

Imports

version

user32

comctl32

advapi32

shlwapi

gdi32

kernel32

shell32

Sections

CODE Size: 60KB - Virtual size: 57KB

.rdata Size: 4KB - Virtual size: 875B

.data Size: 172KB - Virtual size: 169KB

.hdata Size: 4KB - Virtual size: 65KB

DATA Size: 12KB - Virtual size: 8KB

.adata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 772B

.reloc Size: 4KB - Virtual size: 1KB

CODE
Size: 60KB - Virtual size: 57KB

.rdata
Size: 4KB - Virtual size: 875B

.data
Size: 172KB - Virtual size: 169KB

.hdata
Size: 4KB - Virtual size: 65KB

DATA
Size: 12KB - Virtual size: 8KB

.adata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 772B

.reloc
Size: 4KB - Virtual size: 1KB