caa66ee323970c974362a1e5c4b9d452495f7d0bf1bd3a2adf066fb032beed1a

Sharing

Copy URL Twitter E-mail

General

Target

caa66ee323970c974362a1e5c4b9d452495f7d0bf1bd3a2adf066fb032beed1a
Size

94KB
MD5

36adc3478ede21918c18eb5b2b96b9aa
SHA1

bfd88e9288c505a7a7287606813bff28dec68b62
SHA256

caa66ee323970c974362a1e5c4b9d452495f7d0bf1bd3a2adf066fb032beed1a
SHA512

28f8b71ce738d735a6c6915158f854da67b6941c04f94c6ca05d5d2fbd7df4786746682d91f8e1159cf6d9cc0c5facec283cc2cae84f3f0709204b73146ab9fc
SSDEEP

1536:3Juhd1QSpXBzWDhqp/Kpm2o7GRlR08qx9B9tauyAz:aJBydrRrY9tPz

Score

N/A

Malware Config

Signatures

Files

caa66ee323970c974362a1e5c4b9d452495f7d0bf1bd3a2adf066fb032beed1a
.exe windows x86

9854003c51db2855f12a96d9e729facd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

tan
strcmp
memmove
malloc
memcpy

kernel32

Sleep
WriteFile
LoadLibraryA
GetTickCount
GetCurrentProcess
GetDateFormatA
GetFileType
LoadResource
EnumCalendarInfoA
FreeLibrary
FormatMessageA
EnterCriticalSection
GetStringTypeA
InitializeCriticalSection
GetLastError
SetLastError
MulDiv
GetCommandLineA
HeapFree
CompareStringA
CloseHandle
GetUserDefaultLCID
SetErrorMode
GetVersionExA
SetHandleCount
GlobalFindAtomA
lstrcpyA
GetStringTypeW
SetEndOfFile
GetCurrentThread
SetEvent
SizeofResource
GetFullPathNameA
GetVersion
ExitThread
GetStdHandle
GetThreadLocale
ExitProcess
LocalAlloc
CreateEventA
lstrcmpA
GetACP
ReadFile
GetSystemDefaultLangID
GetModuleHandleA
CreateThread
VirtualQuery
LoadLibraryExA
VirtualAllocEx
lstrcmpiA
GetFileAttributesA
CreateFileA
GlobalDeleteAtom
GetModuleFileNameA
VirtualAlloc
GetProcessHeap
lstrlenA
MoveFileExA
GetOEMCP
FindClose
LocalReAlloc

gdi32

GetDCOrgEx
SetTextColor
SetBkMode
CreateBrushIndirect
CreateDIBSection

user32

GetMenu
GetIconInfo
IsWindowVisible
GetCursorPos
GetDC
BeginDeferWindowPos
EnumThreadWindows
DefWindowProcA
ClientToScreen
CharToOemA
CheckMenuItem
CharNextA
CharLowerBuffA
FrameRect
HideCaret
DeferWindowPos
GetMenuItemCount
IsChild
GetClassInfoA
DefFrameProcA
CharLowerA
GetMenuState
ShowScrollBar
RegisterClassA
GetActiveWindow
FillRect
GetWindowTextA
GetScrollPos
GetClientRect
IsDialogMessageA
SetWindowLongA
CreateIcon
GetCursor
DrawTextA
DispatchMessageW
GetScrollRange
DrawMenuBar
CallWindowProcA
GetMenuItemID

oleaut32

GetErrorInfo
SafeArrayGetElement
VariantChangeType
SysReAllocStringLen
VariantCopyInd

shlwapi

PathIsDirectoryA
PathFileExistsA
PathIsContentTypeA
PathGetCharTypeA
SHQueryInfoKeyA
SHDeleteKeyA
SHQueryValueExA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_Read
ImageList_DrawEx
ImageList_Add

advapi32

RegCreateKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyA

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9854003c51db2855f12a96d9e729facd

Headers

File Characteristics

Imports

msvcrt

kernel32

gdi32

user32

oleaut32

shlwapi

comctl32

advapi32

Sections

.text Size: 46KB - Virtual size: 46KB

.bss Size: 512B - Virtual size: 257B

.init Size: 46KB - Virtual size: 45KB

.text
Size: 46KB - Virtual size: 46KB

.bss
Size: 512B - Virtual size: 257B

.init
Size: 46KB - Virtual size: 45KB