ad00e951d319d05dfc7daee04af16e73bf225ae36f2dc4ad489351aac189600e

Sharing

Copy URL Twitter E-mail

General

Target

ad00e951d319d05dfc7daee04af16e73bf225ae36f2dc4ad489351aac189600e
Size

215KB
MD5

0949158226655bee084f2f0aa104e803
SHA1

5d9a813d33ab578daf43a9d9d806c0b41c325bd7
SHA256

ad00e951d319d05dfc7daee04af16e73bf225ae36f2dc4ad489351aac189600e
SHA512

2917d84173d9fb6ba4a4e2a7e9a6571dddf49eddbadef5e9f2696efa67b9d4c1f64fb3a41ed2447c26c2b77e19858554cb3e082cc311363f6f5847e56f30f620
SSDEEP

3072:d+dcFhQ6eabdetDqcI1PbQBK1ql9/nfPTcQIQOEEn1FfpzgXN2vxgxuMhOFb:d+dcFWlaREIiBnfTIf1FhzgXIvxgop

Score

N/A

Malware Config

Signatures

Files

ad00e951d319d05dfc7daee04af16e73bf225ae36f2dc4ad489351aac189600e
.exe windows x86

69b23e5f8463539b9fb4c5dae4437830

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarBstrFromDec
VarBstrFromUI8
VarBstrFromI8
VarBstrFromI4
VarBstrFromUI4
VarBstrFromI1
VarBstrFromUI2
VarBstrFromCy
VarBstrFromR8
VarBstrFromDisp
VarBstrFromUI1
VarBstrFromR4
VarBstrFromI2
VarBstrFromDate

user32

IsWindowVisible
InvalidateRect
EnableWindow
GetDC
ClientToScreen
SetCursor
CheckRadioButton
DispatchMessageW
LoadCursorW
DestroyWindow
GetClientRect
CheckDlgButton
GetAsyncKeyState
ShowWindow
SendMessageW
ReleaseDC
TranslateMessage
IsWindow
MoveWindow
IsRectEmpty
DefWindowProcW
SetDlgItemTextW
GetDesktopWindow
GetDlgItem
CreateDialogParamW
SetWindowLongW
GetWindowRect
PeekMessageW
LoadStringW
GetWindowLongW
GetDlgItemInt
SetDlgItemInt

kernel32

GetProcAddress
SetFilePointer
IsBadCodePtr
lstrcmpiW
GetTickCount
GlobalHandle
GlobalAlloc
GetDiskFreeSpaceW
GetCurrentThread
lstrcpyA
FreeLibrary
InterlockedDecrement
SetLastError
GetFileAttributesW
InterlockedIncrement
GetCurrentProcessId
GetThreadPriority
GlobalFree
GetVersionExW
GetLocaleInfoA
WaitForSingleObject
ResetEvent
IsBadWritePtr
InitializeCriticalSection
GlobalMemoryStatus
MulDiv
lstrcpynW
WaitForMultipleObjects
lstrcpyW
SetEvent
VirtualFree
SetEndOfFile
CloseHandle
WideCharToMultiByte
LeaveCriticalSection
ReadFile
IsBadReadPtr
GetQueuedCompletionStatus
SetThreadPriority
MultiByteToWideChar
GetCurrentProcess
CreateEventW
GetSystemTimeAsFileTime
CreateThread
GetModuleFileNameA
GetProcessHeap
CreateFileW
EnterCriticalSection
DeleteCriticalSection
InterlockedExchange
GetFileSize
ReleaseSemaphore
SetUnhandledExceptionFilter
lstrlenA
GetPrivateProfileStringW
HeapFree
QueryPerformanceCounter
GlobalUnlock
CreateSemaphoreW
lstrcmpW
GlobalLock
WriteFile
lstrlenW
GetProfileIntA
GetLastError
LoadLibraryW
HeapAlloc
GetFullPathNameW
GetACP
GlobalFindAtomA

msls31

LssbGetVisibleDcpInSubline
LsCompressSubline
LssbGetObjDimSubline
LssbGetPlsrunsFromSubline
LssbGetNumberDnodesInSubline
LssbGetDurTrailWithPensInSubline

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69b23e5f8463539b9fb4c5dae4437830

Headers

File Characteristics

Imports

oleaut32

user32

kernel32

msls31

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 7KB - Virtual size: 6.1MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 7KB - Virtual size: 6.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB