cb50393c5e5437247bd08d9e6cf0cc49abf56862a7c2f3d33115bd13b1800bc9

Sharing

Copy URL Twitter E-mail

General

Target

cb50393c5e5437247bd08d9e6cf0cc49abf56862a7c2f3d33115bd13b1800bc9
Size

80KB
MD5

cfd641daff795ed0954c130e0b88e313
SHA1

51df519ae7e054c8a505f04f50aefa89ca1da966
SHA256

cb50393c5e5437247bd08d9e6cf0cc49abf56862a7c2f3d33115bd13b1800bc9
SHA512

d4033ab3b3caf6fa03e9a55245341b569f59506079c43bb2fb72dd62af91c1747aaf117538fd06fbad927b17a300783f6c4fbaea77154194240326d3f791359f
SSDEEP

1536:X7544eFtvHLfQE4ieCQ9sZV044EqEWH+ufB+cU+kxL/8O0vAkIfxqhCgz:L5FoHF4QF6F5R9B+n+w/3qAkZh

Score

N/A

Malware Config

Signatures

Files

cb50393c5e5437247bd08d9e6cf0cc49abf56862a7c2f3d33115bd13b1800bc9
.exe windows x86

f07ea2e622a760eedd1c63c0f79d6c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
GetCursor
GetKeyNameTextA
GetForegroundWindow
GetDC
GetIconInfo
CallWindowProcA
HideCaret
FillRect
TrackPopupMenu
EndPaint
CharLowerA
GetClientRect
GetDesktopWindow
GetLastActivePopup
SetWindowPos
GetDlgItem
GetScrollRange
GetClassInfoA
GetWindowTextA
GetDCEx
IsMenu
GetFocus
GetCursorPos
GetActiveWindow
CreateWindowExA
GetClipboardData
GetCapture
GetClassLongA
GetScrollPos
GetMessagePos

ole32

MkParseDisplayName
CoCreateGuid
GetHGlobalFromStream
CoDisconnectObject
CoReleaseMarshalData
CLSIDFromProgID

advapi32

RegDeleteKeyA

version

VerQueryValueA

comctl32

ImageList_DragShowNolock
ImageList_Remove
ImageList_Add
ImageList_Draw

kernel32

lstrcpyA
DeleteCriticalSection
SetFilePointer
WideCharToMultiByte
GetFileSize
GetSystemDefaultLangID
GetLastError
WriteFile
GetLocaleInfoA
HeapAlloc
LoadLibraryA
LockResource
GetACP
SetThreadLocale
LocalReAlloc
LoadLibraryExA
MoveFileA
GetCurrentProcess
ExitProcess
FindResourceA
SetEndOfFile
WaitForSingleObject
lstrcmpiA
GetFullPathNameA
ExitThread
HeapDestroy
HeapFree
GetVersionExA
FreeLibrary
GetLocalTime
VirtualAllocEx
GlobalAlloc
SetErrorMode
FreeResource
LocalAlloc
VirtualFree
GetCPInfo
GetVersion
GetProcAddress
ResetEvent
GetStringTypeA
SizeofResource
SetLastError
GetModuleHandleA
CreateFileA
lstrcatA
GlobalAddAtomA
VirtualAlloc
GetCurrentThread
GetThreadLocale
lstrlenA
GetUserDefaultLCID
GetDateFormatA
DeleteFileA
EnumCalendarInfoA
Sleep
GetFileType
GetCurrentProcessId
GetOEMCP
GetTickCount
RaiseException
InitializeCriticalSection
GetCommandLineA
MulDiv
GetStartupInfoA

shell32

Shell_NotifyIconA
DragQueryFileA
SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
SHGetFileInfoA

msvcrt

malloc
memmove
acos
strcmp

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f07ea2e622a760eedd1c63c0f79d6c9c

Headers

File Characteristics

Imports

user32

ole32

advapi32

version

comctl32

kernel32

shell32

msvcrt

Sections

CODE Size: 36KB - Virtual size: 35KB

.rdata Size: 42KB - Virtual size: 113KB

.data Size: 1024B - Virtual size: 608B

CODE
Size: 36KB - Virtual size: 35KB

.rdata
Size: 42KB - Virtual size: 113KB

.data
Size: 1024B - Virtual size: 608B