5cc8b8d7356557290f4732d258f3796c39386af8ed59ca22f9e4a4b172df516c

Sharing

Copy URL Twitter E-mail

General

Target

5cc8b8d7356557290f4732d258f3796c39386af8ed59ca22f9e4a4b172df516c
Size

179KB
MD5

dc42041446160f8d9887728234dbb70d
SHA1

34ddd67b3de284a9c2aab8bda569de44955c6d14
SHA256

5cc8b8d7356557290f4732d258f3796c39386af8ed59ca22f9e4a4b172df516c
SHA512

fbaede53b2810132f0e6a83a974a7c9755b11e6c42df09c53a008d031b09671416d98207e226e3e8b6fd305cb10010d3ef49c6054ba3bc53970e0b307ee05263
SSDEEP

3072:MRCcfK0iGLER5uGj4DfruEh0bp19AQTXIdwuD:MOlR5D4Djutbp19AQTXIdD

Score

N/A

Malware Config

Signatures

Files

5cc8b8d7356557290f4732d258f3796c39386af8ed59ca22f9e4a4b172df516c
.exe windows x86

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Remove
ImageList_Write
ImageList_Add
ImageList_Draw
ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_Remove
ImageList_Add

advapi32

RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegLoadKeyA
RegCreateKeyA

kernel32

CreateFileA
GetFullPathNameA
ExitThread
GetModuleHandleA
ExitProcess
VirtualAlloc
ExitThread
LocalAlloc
GetModuleHandleW
IsBadReadPtr
lstrlenA
GetProcAddress
GetACP
LoadLibraryExA

msvcrt

strncmp
rand
wcstol

shlwapi

SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA
PathGetCharTypeA
SHDeleteKeyA

gdi32

CreatePalette
GetCurrentPositionEx
LineTo
CreatePenIndirect
CreateCompatibleDC

shell32

SHFileOperationA
SHGetDesktopFolder

version

VerFindFileA

oleaut32

VariantChangeType
SysReAllocStringLen
SafeArrayUnaccessData
GetErrorInfo
SysStringLen
SysAllocStringLen
VariantCopyInd
SysFreeString
SafeArrayCreate
RegisterTypeLib
VariantChangeType

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

ole32

CoCreateInstanceEx
WriteClassStm

user32

GetMenuItemCount
SetCapture

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA7
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA3
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

Imports

comctl32

advapi32

kernel32

msvcrt

shlwapi

gdi32

shell32

version

oleaut32

comdlg32

ole32

user32

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 1KB

.DATA1 Size: 2KB - Virtual size: 1KB

.DATA7 Size: 1024B - Virtual size: 867B

.DATA3 Size: 126KB - Virtual size: 125KB

.DATA9 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 1KB

.DATA1
Size: 2KB - Virtual size: 1KB

.DATA7
Size: 1024B - Virtual size: 867B

.DATA3
Size: 126KB - Virtual size: 125KB

.DATA9
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB