5658a6b787b023bb4c6e22926cc2d4bb400fb9a894615ae67f94a70a480594a7

Sharing

Copy URL

Twitter E-mail

General

Target

5658a6b787b023bb4c6e22926cc2d4bb400fb9a894615ae67f94a70a480594a7
Size

115KB
MD5

11f64b86f3a5fa533638562c8aaf6aeb
SHA1

4fc3858ede29c88c3b4d5362f38fc1285dd0bede
SHA256

5658a6b787b023bb4c6e22926cc2d4bb400fb9a894615ae67f94a70a480594a7
SHA512

6a7fc1d9992ebd33e01104d84cc12c4f892b04755eba83deab7f4a60c0ffbadd2ac8096230850873b3f21f8c9f49a65b453645e8e14485cb6901bfa0efff6f09
SSDEEP

3072:YmpEp9xUWu1gGjXr2vwvEbMps2i/XHCoL:YmpPTj7QIpsPJ

Score

N/A

Malware Config

Signatures

Files

5658a6b787b023bb4c6e22926cc2d4bb400fb9a894615ae67f94a70a480594a7
.exe windows x86

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
GetSaveFileNameA

version

GetFileVersionInfoSizeA
VerFindFileA

kernel32

GetStringTypeW
ExitThread
SetEvent
GetModuleFileNameA
GetProcAddress
GetStdHandle
lstrcpyA
GlobalDeleteAtom
GetCurrentThreadId
VirtualAllocEx
SizeofResource
DeleteCriticalSection
GetModuleHandleA
GetUserDefaultLCID

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_Add
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read
ImageList_Draw

ole32

CoRevokeClassObject
CoGetMalloc
CoUnmarshalInterface
CreateOleAdviseHolder

gdi32

LineTo
SetBkColor
GetDIBColorTable
CreateBitmap
GetDIBits
CopyEnhMetaFileA
CreatePenIndirect
GetPixel
CreatePalette
GetPaletteEntries

advapi32

RegQueryInfoKeyA
RegLoadKeyA
RegQueryValueExA

user32

DrawIconEx
SetScrollRange
SetCapture
EndPaint
ClientToScreen
EnableWindow
GetWindowPlacement
AdjustWindowRectEx
PostQuitMessage
KillTimer
DestroyWindow
OffsetRect
GetMessagePos
GetKeyboardLayoutList
GetTopWindow
EnumThreadWindows
GetSubMenu
DispatchMessageW
GetKeyboardState
SetPropA
CloseClipboard
RemovePropA
LoadCursorA
MapVirtualKeyA
MsgWaitForMultipleObjects
GetCursor
LoadIconA

oleaut32

SafeArrayCreate
SysStringLen
SafeArrayPtrOfIndex
VariantCopyInd
VariantChangeType
SysFreeString
SafeArrayGetElement
SafeArrayGetUBound
SysAllocStringLen
RegisterTypeLib

shell32

SHGetFolderPathA
SHGetDesktopFolder
SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA

shlwapi

PathIsContentTypeA
SHGetValueA
SHQueryValueExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

Imports

comdlg32

version

kernel32

comctl32

ole32

gdi32

advapi32

user32

oleaut32

shell32

shlwapi

Sections

.text Size: 28KB - Virtual size: 27KB

.edata Size: 512B - Virtual size: 500B

BSS Size: 82KB - Virtual size: 81KB

DATA Size: 1KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.edata
Size: 512B - Virtual size: 500B

BSS
Size: 82KB - Virtual size: 81KB

DATA
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB