3cb00338a7054630c9debe5a911dc0215227b3900eafb28246a7f65d12099bb2

Sharing

Copy URL

Twitter E-mail

General

Target

3cb00338a7054630c9debe5a911dc0215227b3900eafb28246a7f65d12099bb2
Size

294KB
MD5

621cd519b68b43386ade010c0085a650
SHA1

4a3256c494b1f25dfd649aad7810f362e343b9f7
SHA256

3cb00338a7054630c9debe5a911dc0215227b3900eafb28246a7f65d12099bb2
SHA512

609b7bf424cdf21ae2e3a68d1bf3fbb3aa3f872b8c321cdc437c099f51e73570f76543be79b77861727619a1ed6417fabb05e9a23dcbca40f2a4d53bc4697120
SSDEEP

6144:J7ocZT3dgyf89UzgCJDW0oZzHDUfB0nerwGcAIOLy3w8tnX:J7oO3dgyf8S9BjWDe0MwFKLyptX

Score

N/A

Malware Config

Signatures

Files

3cb00338a7054630c9debe5a911dc0215227b3900eafb28246a7f65d12099bb2
.exe windows x86

43f3c80ba882e4e32463f2cf5610498a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

WindowFromAccessibleObject
CreateStdAccessibleObject
GetStateTextW
AccessibleChildren
ObjectFromLresult
GetStateTextA

user32

GetWindowModuleFileNameA
GetPropW
GetDlgItemTextA
SetClassLongW
GetWindowLongA
CopyRect
SetWindowsHookW
CreateDesktopW
IsWindowVisible
DdeCreateStringHandleW
GetActiveWindow
LoadCursorA
GetScrollInfo
PaintDesktop
LoadMenuIndirectW

kernel32

lstrlenA
GetStartupInfoA
GetModuleHandleA

oleaut32

VarI2FromDisp
GetErrorInfo
GetRecordInfoFromGuids
VarCyCmp
LoadTypeLibEx
SafeArrayRedim
VarR8FromDec
VarDateFromUdate
VarUI1FromI4
VarBoolFromR8
VarUI1FromR8
VariantCopyInd
DispCallFunc
VarR4FromR8
VarDateFromUI4

gdi32

MaskBlt

shell32

SHGetFileInfoA
SHChangeNotify
DragAcceptFiles
ShellAboutA
SHGetPathFromIDListA
ord180
SHGetSettings
SHInvokePrinterCommandW
SHFreeNameMappings
Shell_NotifyIconA
Shell_NotifyIconW

msvcrt

__setusermatherr
_exit
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__commode
_adjust_fdiv
__p__fmode
_initterm
__getmainargs
_acmdln
exit

ole32

OleCreate
OleCreateLinkToFile
CoFreeUnusedLibraries
HMENU_UserUnmarshal
OleSetMenuDescriptor
CoRevokeClassObject
CoResumeClassObjects
GetConvertStg
CreateOleAdviseHolder
ReadClassStm
OleQueryCreateFromData
RevokeDragDrop
CreateItemMoniker
CoGetStandardMarshal
OleTranslateAccelerator
CoIsOle1Class
HPALETTE_UserSize
CreateDataAdviseHolder
CoLoadLibrary
STGMEDIUM_UserSize
HBITMAP_UserSize
CoReleaseMarshalData
CoCreateFreeThreadedMarshaler
OleDoAutoConvert
CoGetMarshalSizeMax
StgCreateStorageEx
OleGetIconOfClass
OleSetAutoConvert
CoRegisterSurrogate
OleQueryLinkFromData
OleMetafilePictFromIconAndLabel
CoGetObject

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43f3c80ba882e4e32463f2cf5610498a

Headers

File Characteristics

Imports

oleacc

user32

kernel32

oleaut32

gdi32

shell32

msvcrt

ole32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 532KB

.tls Size: 4KB - Virtual size: 28B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 532KB

.tls
Size: 4KB - Virtual size: 28B

.rsrc
Size: 4KB - Virtual size: 1KB