ea9e11f995733bcf590be0adbf04b68a8e227059e66f9970a1df15d4cb25c0a5

Sharing

Copy URL Twitter E-mail

General

Target

ea9e11f995733bcf590be0adbf04b68a8e227059e66f9970a1df15d4cb25c0a5
Size

93KB
MD5

7c5249f8d5d4fb5b3b07e7ff65ee203d
SHA1

354d46ceb3fe315d127f162b6adc50a080930733
SHA256

ea9e11f995733bcf590be0adbf04b68a8e227059e66f9970a1df15d4cb25c0a5
SHA512

4897b019d647b7f443a0793ae269127d1e38cf9b25e4190915bd9ca894099ff80c855dce4eba514a89ef430cb736a4afea46c8faad29d6f3ff6382ef78e6f4d9
SSDEEP

1536:Ai0xMxLnRJUAG6AmRt8m++RTHGYGOuG9xPCh+6GmciZ0diXvh9hIX:Ai0SpIbK8m++RTHGDOuG9xPv6GmcizfK

Score

N/A

Malware Config

Signatures

Files

ea9e11f995733bcf590be0adbf04b68a8e227059e66f9970a1df15d4cb25c0a5
.exe windows x86

9bbbc5849281f34b5b0c34add0a07f78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegQueryValueA
GetUserNameA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegQueryInfoKeyA

comdlg32

GetSaveFileNameA
ChooseColorA
FindTextA
GetOpenFileNameA
FindTextA
ChooseColorA
GetSaveFileNameA

ole32

CoGetContextToken
CLSIDFromString
CoDisconnectObject
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
CreateBindCtx
CoRegisterClassObject
OleCreateStaticFromData
CoGetObjectContext
CoCreateInstanceEx
OleCreateStaticFromData
CLSIDFromString
OleRun
StgCreateDocfileOnILockBytes

kernel32

lstrcatA
ExitThread
RaiseException
VirtualAllocEx
GetDiskFreeSpaceA
GetLastError
GetModuleHandleA
GetOEMCP
GetLocalTime
GetCPInfo
GetStringTypeW
VirtualAlloc
GetDateFormatA
HeapAlloc
GetStdHandle
LoadLibraryExA
WideCharToMultiByte
lstrcpynA
CloseHandle
GetProcAddress
ExitProcess
SetEndOfFile
LocalAlloc
GetUserDefaultLCID
SizeofResource

shlwapi

SHDeleteKeyA
SHDeleteValueA
PathIsDirectoryA
SHGetValueA
PathGetCharTypeA
SHQueryInfoKeyA
PathIsContentTypeA
SHQueryValueExA
PathFileExistsA
PathIsContentTypeA
SHQueryInfoKeyA
PathIsDirectoryA
SHDeleteKeyA
SHGetValueA
SHDeleteValueA
SHSetValueA
PathGetCharTypeA

gdi32

SelectPalette
CreatePenIndirect
GetClipBox
GetRgnBox
CreateCompatibleBitmap
SetTextColor
GetDIBits

oleaut32

SafeArrayPtrOfIndex
OleLoadPicture
VariantCopyInd
SafeArrayCreate
SafeArrayUnaccessData

msvcrt

memcmp
log10
atol
memcpy
mbstowcs
wcschr
memset
srand
exit
sin
abs
clock
log
ceil
wcsncmp
strlen
time
_acmdln
tolower
wcstol
memmove
fabs
calloc
strcmp
swprintf
pow
rand
sqrt
malloc
sprintf
strncmp
exp
wcscspn

version

GetFileVersionInfoSizeA
VerQueryValueA

user32

DefFrameProcA
CallWindowProcA
GetSysColor
GetWindow
GetMenu
GetSubMenu
ShowScrollBar
EqualRect
GetCursor
GetKeyState
CharLowerA
EndDeferWindowPos
SetWindowLongA
GetActiveWindow
GetPropA
DrawEdge
CharToOemA
DefWindowProcA
EnableScrollBar
GetClipboardData
CreatePopupMenu
GetSysColorBrush
GetDesktopWindow
CharLowerBuffA
GetIconInfo
GetScrollRange
GetFocus
IsChild
CreateMenu
EnumChildWindows
EnumWindows
BeginDeferWindowPos
FillRect
BeginPaint
GetKeyNameTextA
DrawTextA
DrawIconEx
DrawIcon
GetCursorPos
SystemParametersInfoA
GetMenuState
SetWindowPos
CallNextHookEx
MessageBoxA
CreateWindowExA
SetCursor
GetClassInfoA
GetWindowTextA
GetScrollInfo
TrackPopupMenu
IsWindowVisible
SetTimer
EndPaint
GetClassLongA
IsWindowEnabled
GetMessagePos
ShowWindow
ClientToScreen
DrawFrameControl
CreateIcon
DefMDIChildProcA
EnumThreadWindows
GetForegroundWindow
GetDCEx
GetDC
DispatchMessageA
DrawMenuBar
FrameRect
IsMenu
GetMenuItemCount
CharNextA
DispatchMessageW
EnableWindow
GetParent
GetMenuStringA
RegisterClassA
IsDialogMessageA
GetCapture
HideCaret
GetMenuItemInfoA
GetLastActivePopup
GetClientRect
EnableMenuItem
FindWindowA
DeferWindowPos
CheckMenuItem
SetWindowTextA
GetDlgItem
GetScrollPos
GetMenuItemID

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHFileOperationA
SHGetFolderPathA

comctl32

ImageList_Draw
ImageList_GetBkColor
ImageList_Read
ImageList_DrawEx
ImageList_Add
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Remove
ImageList_Create

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bbbc5849281f34b5b0c34add0a07f78

Headers

File Characteristics

Imports

advapi32

comdlg32

ole32

kernel32

shlwapi

gdi32

oleaut32

msvcrt

version

user32

shell32

comctl32

Sections

.text Size: 45KB - Virtual size: 45KB

.init Size: 42KB - Virtual size: 42KB

.edata Size: 512B - Virtual size: 85B

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

.text
Size: 45KB - Virtual size: 45KB

.init
Size: 42KB - Virtual size: 42KB

.edata
Size: 512B - Virtual size: 85B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB