93a05943f4801a46a7f477afd8ff0c23a622b71cd9eb39e3b96c8f45532f006e

Sharing

Copy URL Twitter E-mail

General

Target

93a05943f4801a46a7f477afd8ff0c23a622b71cd9eb39e3b96c8f45532f006e
Size

115KB
MD5

1360e35437e342a5aa112d7ee067fc52
SHA1

4a59d5bca2d86ca350a93c5cea3db49f162b37f7
SHA256

93a05943f4801a46a7f477afd8ff0c23a622b71cd9eb39e3b96c8f45532f006e
SHA512

5ea3727a5fca68c04d80894981dc04144e33ec4835d646d3e8b59ef41f0ffec457efeeee0f4b588429ef35b8a932eb25a467b2e219527c494cee7513821b00c7
SSDEEP

3072:YmpEp9xUWu1gGjXr2vwvEbMps2i/XHCof:YmpPTj7QIpsPV

Score

N/A

Malware Config

Signatures

Files

93a05943f4801a46a7f477afd8ff0c23a622b71cd9eb39e3b96c8f45532f006e
.exe windows x86

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
GetSaveFileNameA

version

GetFileVersionInfoSizeA
VerFindFileA

kernel32

GetStringTypeW
ExitThread
SetEvent
GetModuleFileNameA
GetProcAddress
GetStdHandle
lstrcpyA
GlobalDeleteAtom
GetCurrentThreadId
VirtualAllocEx
SizeofResource
DeleteCriticalSection
GetModuleHandleA
GetUserDefaultLCID

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_Add
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read
ImageList_Draw

ole32

CoRevokeClassObject
CoGetMalloc
CoUnmarshalInterface
CreateOleAdviseHolder

gdi32

LineTo
SetBkColor
GetDIBColorTable
CreateBitmap
GetDIBits
CopyEnhMetaFileA
CreatePenIndirect
GetPixel
CreatePalette
GetPaletteEntries

advapi32

RegQueryInfoKeyA
RegLoadKeyA
RegQueryValueExA

user32

DrawIconEx
SetScrollRange
SetCapture
EndPaint
ClientToScreen
EnableWindow
GetWindowPlacement
AdjustWindowRectEx
PostQuitMessage
KillTimer
DestroyWindow
OffsetRect
GetMessagePos
GetKeyboardLayoutList
GetTopWindow
EnumThreadWindows
GetSubMenu
DispatchMessageW
GetKeyboardState
SetPropA
CloseClipboard
RemovePropA
LoadCursorA
MapVirtualKeyA
MsgWaitForMultipleObjects
GetCursor
LoadIconA

oleaut32

SafeArrayCreate
SysStringLen
SafeArrayPtrOfIndex
VariantCopyInd
VariantChangeType
SysFreeString
SafeArrayGetElement
SafeArrayGetUBound
SysAllocStringLen
RegisterTypeLib

shell32

SHGetFolderPathA
SHGetDesktopFolder
SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA

shlwapi

PathIsContentTypeA
SHGetValueA
SHQueryValueExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

Imports

comdlg32

version

kernel32

comctl32

ole32

gdi32

advapi32

user32

oleaut32

shell32

shlwapi

Sections

.text Size: 28KB - Virtual size: 27KB

.edata Size: 512B - Virtual size: 500B

BSS Size: 82KB - Virtual size: 81KB

DATA Size: 1KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.edata
Size: 512B - Virtual size: 500B

BSS
Size: 82KB - Virtual size: 81KB

DATA
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB