cfd8b8e643786f5e04f3f4096eaef55b98c300f0a416de987c3be99bd9389c52

Sharing

Copy URL Twitter E-mail

General

Target

cfd8b8e643786f5e04f3f4096eaef55b98c300f0a416de987c3be99bd9389c52
Size

95KB
MD5

6a1750a4c699b0c6a33bc52e48aa7969
SHA1

7114dc49afb5ff02b0be201c07b616c5d5b5004c
SHA256

cfd8b8e643786f5e04f3f4096eaef55b98c300f0a416de987c3be99bd9389c52
SHA512

acdd8a3627e0eacc0bc1041b240ec62e071b9bb193f133e3cf3d46b840212c10e53ec6d9353059513ffcddf6da92aee4f80d8a75d821f50cc491b523978e39f9
SSDEEP

1536:jaKwCE2RI/WJa6AnVF+3n5QEFIq+KaczHzOIFqXZL70DcRMDGG0:j/VE2S96CVF+X5QMeKaMHtFqh0oRMDG

Score

N/A

Malware Config

Signatures

Files

cfd8b8e643786f5e04f3f4096eaef55b98c300f0a416de987c3be99bd9389c52
.exe windows x86

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerInstallFileA

kernel32

GetCurrentProcess
lstrlenA
VirtualAllocEx
VirtualAlloc
GetModuleHandleA
LoadLibraryExA
GetVersionExA

comdlg32

GetOpenFileNameA
GetFileTitleA
FindTextA
GetSaveFileNameA

user32

GetActiveWindow

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder

shlwapi

SHQueryValueExA

gdi32

GetDIBColorTable
SetBkColor
SetPixel
CreateCompatibleDC
CreatePenIndirect
SelectPalette

msvcrt

tan
memcpy
calloc

advapi32

RegCreateKeyExA
GetLengthSid
RegDeleteValueA
RegLoadKeyA

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_Remove
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Draw
ImageList_Add

ole32

OleRun
CoRegisterClassObject
CoRevokeClassObject
StringFromIID
StgOpenStorage
CoCreateGuid
GetHGlobalFromStream

oleaut32

SysAllocStringLen
VariantChangeType
SysStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopyInd
SysReAllocStringLen
SysFreeString

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

Imports

version

kernel32

comdlg32

user32

shell32

shlwapi

gdi32

msvcrt

advapi32

comctl32

ole32

oleaut32

Sections

CODE Size: 43KB - Virtual size: 42KB

.rdata Size: 45KB - Virtual size: 45KB

DATA Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

CODE
Size: 43KB - Virtual size: 42KB

.rdata
Size: 45KB - Virtual size: 45KB

DATA
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB