1b1e1ae7a74f338248c591c319f3e3965f5e38b061e304e28170228e26c21943

Sharing

Copy URL Twitter E-mail

General

Target

1b1e1ae7a74f338248c591c319f3e3965f5e38b061e304e28170228e26c21943
Size

103KB
MD5

11bf20a868160bc6c2694329b697eee0
SHA1

3b013937fa0e13fb56f10a542e700a99ab3442df
SHA256

1b1e1ae7a74f338248c591c319f3e3965f5e38b061e304e28170228e26c21943
SHA512

0c67a92956d6561a317e9c08c461817620f64a605deeba09bfce2fddf4d08fdde99b6819eddb077c7eef03c0080d73e76b67468596f093ed974e623ffb21d69f
SSDEEP

3072:TZyIDJPKNcHLiK8/i+m6GHTD4WMSgQxZ1Xad:Fy0JSK8/+60ssQ

Score

N/A

Malware Config

Signatures

Files

1b1e1ae7a74f338248c591c319f3e3965f5e38b061e304e28170228e26c21943
.exe windows x86

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantChangeType
SafeArrayPtrOfIndex
GetErrorInfo
SysAllocStringLen
SafeArrayUnaccessData
SysReAllocStringLen
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
SafeArrayCreate
SafeArrayGetUBound
VariantCopyInd
SysAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SafeArrayUnaccessData

version

GetFileVersionInfoA
VerInstallFileA
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
VerInstallFileA

gdi32

CopyEnhMetaFileA
CreateCompatibleDC
CreateDIBSection
GetDCOrgEx

user32

GetCursorPos
GetCursor
IsWindowEnabled
GetCapture
GetScrollInfo
IntersectRect
AdjustWindowRectEx
SetWindowTextA
UnhookWindowsHookEx
LoadKeyboardLayoutA
GetMenuItemInfoA
GetMessagePos
OemToCharA

comctl32

ImageList_DrawEx
ImageList_Write
ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Create
ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_DragShowNolock
ImageList_Remove
ImageList_Write
ImageList_Create

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA
Shell_NotifyIconA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetFileInfoA
Shell_NotifyIconA

ole32

GetHGlobalFromStream
OleRun
StgCreateDocfileOnILockBytes
MkParseDisplayName
CoReleaseMarshalData
CoCreateGuid
CoUnmarshalInterface

shlwapi

SHDeleteValueA
SHDeleteKeyA
SHGetValueA
SHQueryValueExA

kernel32

ExitThread
GetModuleHandleA
GetACP
GetProcAddress
GetLastError
VirtualAlloc
Sleep
ResetEvent
GlobalAddAtomA
HeapFree
CloseHandle
GetStdHandle

advapi32

RegEnumValueA
RegDeleteKeyA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
FindTextA
GetFileTitleA
ChooseColorA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 575B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

Imports

oleaut32

version

gdi32

user32

comctl32

shell32

ole32

shlwapi

kernel32

advapi32

comdlg32

Sections

.text Size: 29KB - Virtual size: 28KB

DATA Size: 1024B - Virtual size: 575B

.edata Size: 70KB - Virtual size: 70KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

DATA
Size: 1024B - Virtual size: 575B

.edata
Size: 70KB - Virtual size: 70KB

.rdata
Size: 1KB - Virtual size: 1KB