9a2d4c4545271a13a500c2e0504d5ee1747a460c27fda8f0e4aab3f1af4560f1

Sharing

Copy URL Twitter E-mail

General

Target

9a2d4c4545271a13a500c2e0504d5ee1747a460c27fda8f0e4aab3f1af4560f1
Size

115KB
MD5

110d105e0d88f8ea5015ae33a85df8b5
SHA1

61116c48ecdf67dc053c26f5d3f012ee1ba0040c
SHA256

9a2d4c4545271a13a500c2e0504d5ee1747a460c27fda8f0e4aab3f1af4560f1
SHA512

210e7f7faf82fda2fd2640973a6c0fd5bd272ba987fa8f216809130e358df8b797700b0354387cb09627566fb5d45f20c11b7ef1d8139753186f5526c8c82abd
SSDEEP

1536:UkoAzrk0MkJaG3Tmi8eCWWAu4+y268gtZYL86L7EZ3c:JRzrnMZG318eCWlkyB86ZY46sO

Score

N/A

Malware Config

Signatures

Files

9a2d4c4545271a13a500c2e0504d5ee1747a460c27fda8f0e4aab3f1af4560f1
.exe windows x86

6d1c598a022c8b4e0de28421f901a7fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CopyEnhMetaFileA
LineTo
CreatePenIndirect
RestoreDC

advapi32

RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA

ole32

WriteClassStm
CoGetObjectContext
CoUninitialize
OleCreateStaticFromData

version

GetFileVersionInfoA

shlwapi

PathGetCharTypeA
SHEnumValueA

kernel32

ExitProcess
GetModuleHandleA
GetVersionExA
GetCommandLineA
VirtualAllocEx
LocalAlloc
GetProcAddress

oleaut32

VariantCopyInd
SysFreeString
RegisterTypeLib
VariantChangeType
SafeArrayCreate
OleLoadPicture
SafeArrayUnaccessData
SysReAllocStringLen
SysAllocStringLen

comctl32

ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_Read
ImageList_Add
ImageList_DragShowNolock
ImageList_Draw
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Write

user32

IsChild
IsWindowEnabled

Sections

CODE
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 609B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6d1c598a022c8b4e0de28421f901a7fa

Headers

File Characteristics

Imports

gdi32

advapi32

ole32

version

shlwapi

kernel32

oleaut32

comctl32

user32

Sections

CODE Size: 28KB - Virtual size: 27KB

.tls Size: 1024B - Virtual size: 609B

.data Size: 81KB - Virtual size: 81KB

.edata Size: 1KB - Virtual size: 1KB

BSS Size: 2KB - Virtual size: 1KB

CODE
Size: 28KB - Virtual size: 27KB

.tls
Size: 1024B - Virtual size: 609B

.data
Size: 81KB - Virtual size: 81KB

.edata
Size: 1KB - Virtual size: 1KB

BSS
Size: 2KB - Virtual size: 1KB