2c7488da1cc81810e67eb193ba2a0134615a138262dd2a68e30b469fcf77f4f4

Sharing

Copy URL Twitter E-mail

General

Target

2c7488da1cc81810e67eb193ba2a0134615a138262dd2a68e30b469fcf77f4f4
Size

115KB
MD5

11446e911316bc0643e32fd57b94886c
SHA1

bf0624c5c52fea9c3f891a6bf6e909b953b09f8c
SHA256

2c7488da1cc81810e67eb193ba2a0134615a138262dd2a68e30b469fcf77f4f4
SHA512

e9be8c97d569b160852942d0039c18e630aa26305d5e2c579e97758d98dec7421caac6c9bc34031a431fe198399678e7a461ac55a4ef3b6be87773d8dcf9bf52
SSDEEP

3072:YmpEp9xUWu1gGjXr2vwvEbMps2i/XHCon:YmpPTj7QIpsPN

Score

N/A

Malware Config

Signatures

Files

2c7488da1cc81810e67eb193ba2a0134615a138262dd2a68e30b469fcf77f4f4
.exe windows x86

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
GetSaveFileNameA

version

GetFileVersionInfoSizeA
VerFindFileA

kernel32

GetStringTypeW
ExitThread
SetEvent
GetModuleFileNameA
GetProcAddress
GetStdHandle
lstrcpyA
GlobalDeleteAtom
GetCurrentThreadId
VirtualAllocEx
SizeofResource
DeleteCriticalSection
GetModuleHandleA
GetUserDefaultLCID

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_Add
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read
ImageList_Draw

ole32

CoRevokeClassObject
CoGetMalloc
CoUnmarshalInterface
CreateOleAdviseHolder

gdi32

LineTo
SetBkColor
GetDIBColorTable
CreateBitmap
GetDIBits
CopyEnhMetaFileA
CreatePenIndirect
GetPixel
CreatePalette
GetPaletteEntries

advapi32

RegQueryInfoKeyA
RegLoadKeyA
RegQueryValueExA

user32

DrawIconEx
SetScrollRange
SetCapture
EndPaint
ClientToScreen
EnableWindow
GetWindowPlacement
AdjustWindowRectEx
PostQuitMessage
KillTimer
DestroyWindow
OffsetRect
GetMessagePos
GetKeyboardLayoutList
GetTopWindow
EnumThreadWindows
GetSubMenu
DispatchMessageW
GetKeyboardState
SetPropA
CloseClipboard
RemovePropA
LoadCursorA
MapVirtualKeyA
MsgWaitForMultipleObjects
GetCursor
LoadIconA

oleaut32

SafeArrayCreate
SysStringLen
SafeArrayPtrOfIndex
VariantCopyInd
VariantChangeType
SysFreeString
SafeArrayGetElement
SafeArrayGetUBound
SysAllocStringLen
RegisterTypeLib

shell32

SHGetFolderPathA
SHGetDesktopFolder
SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA

shlwapi

PathIsContentTypeA
SHGetValueA
SHQueryValueExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

Imports

comdlg32

version

kernel32

comctl32

ole32

gdi32

advapi32

user32

oleaut32

shell32

shlwapi

Sections

.text Size: 28KB - Virtual size: 27KB

.edata Size: 512B - Virtual size: 500B

BSS Size: 82KB - Virtual size: 81KB

DATA Size: 1KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.edata
Size: 512B - Virtual size: 500B

BSS
Size: 82KB - Virtual size: 81KB

DATA
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB