349ff7e217f8d1d7d244102e4da79d34f00148e7088598f69043532d4f212240

Sharing

Copy URL Twitter E-mail

General

Target

349ff7e217f8d1d7d244102e4da79d34f00148e7088598f69043532d4f212240
Size

103KB
MD5

1110abe7c8d15b7233b89f09a764f72b
SHA1

5d0b8c075645952a64a40f38172e0fe7c3bd3af9
SHA256

349ff7e217f8d1d7d244102e4da79d34f00148e7088598f69043532d4f212240
SHA512

709c3f655c32d26a3ff9830fa7792f580382ed952ca2f130c999bd2350136318e88869eb336f997af9f3c8398487ca9bec33e22e2d034644b2b36adc05f4d495
SSDEEP

3072:TZyIDJPKNcHLiK8/i+m6GHTD4WMSgQxZ1Pad:Fy0JSK8/+60ssI

Score

N/A

Malware Config

Signatures

Files

349ff7e217f8d1d7d244102e4da79d34f00148e7088598f69043532d4f212240
.exe windows x86

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantChangeType
SafeArrayPtrOfIndex
GetErrorInfo
SysAllocStringLen
SafeArrayUnaccessData
SysReAllocStringLen
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
SafeArrayCreate
SafeArrayGetUBound
VariantCopyInd
SysAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SafeArrayUnaccessData

version

GetFileVersionInfoA
VerInstallFileA
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
VerInstallFileA

gdi32

CopyEnhMetaFileA
CreateCompatibleDC
CreateDIBSection
GetDCOrgEx

user32

GetCursorPos
GetCursor
IsWindowEnabled
GetCapture
GetScrollInfo
IntersectRect
AdjustWindowRectEx
SetWindowTextA
UnhookWindowsHookEx
LoadKeyboardLayoutA
GetMenuItemInfoA
GetMessagePos
OemToCharA

comctl32

ImageList_DrawEx
ImageList_Write
ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Create
ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_DragShowNolock
ImageList_Remove
ImageList_Write
ImageList_Create

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA
Shell_NotifyIconA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetFileInfoA
Shell_NotifyIconA

ole32

GetHGlobalFromStream
OleRun
StgCreateDocfileOnILockBytes
MkParseDisplayName
CoReleaseMarshalData
CoCreateGuid
CoUnmarshalInterface

shlwapi

SHDeleteValueA
SHDeleteKeyA
SHGetValueA
SHQueryValueExA

kernel32

ExitThread
GetModuleHandleA
GetACP
GetProcAddress
GetLastError
VirtualAlloc
Sleep
ResetEvent
GlobalAddAtomA
HeapFree
CloseHandle
GetStdHandle

advapi32

RegEnumValueA
RegDeleteKeyA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
FindTextA
GetFileTitleA
ChooseColorA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 575B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

Imports

oleaut32

version

gdi32

user32

comctl32

shell32

ole32

shlwapi

kernel32

advapi32

comdlg32

Sections

.text Size: 29KB - Virtual size: 28KB

DATA Size: 1024B - Virtual size: 575B

.edata Size: 70KB - Virtual size: 70KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

DATA
Size: 1024B - Virtual size: 575B

.edata
Size: 70KB - Virtual size: 70KB

.rdata
Size: 1KB - Virtual size: 1KB