0f0dfb9d27edd87caa9c87f0482179996f955f39c47edf864e367bad98645f8b

Sharing

Copy URL

Twitter E-mail

General

Target

0f0dfb9d27edd87caa9c87f0482179996f955f39c47edf864e367bad98645f8b
Size

148KB
MD5

6f668f0ce8047db86dc6e3ee20bdf0f0
SHA1

562975f2f52fa1bd0f9b53dcf1e4d188449344ed
SHA256

0f0dfb9d27edd87caa9c87f0482179996f955f39c47edf864e367bad98645f8b
SHA512

ce90869bad68212fb7029c82db02743326b73e2ecc69630088cc2ea5584dead405c049681d8f5170342aed84f16cd5e2de25ce50790bdc3b7362869e05c32dfa
SSDEEP

1536:ZZaR11er/HAoL2RZzvi3yCyT41JCaF8yRQvlSM+vKajxc8HZUXRtjAsZMaURJJYI:ZQR1ZoLMon1NGyRrKaO2Z+tjDZ5URJJZ

Score

N/A

Malware Config

Signatures

Files

0f0dfb9d27edd87caa9c87f0482179996f955f39c47edf864e367bad98645f8b
.exe windows x86

c7168111b40b66493a85b64a4bc966fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscpy
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
fopen
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
strlen
memcmp
strcmp
fclose
fgets
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
strcpy
__setusermatherr
_chkesp

kernel32

GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
CreateProcessA
GetWindowsDirectoryA
GetStartupInfoA

user32

LoadIconA
PostMessageA
CreateWindowExA
EndDialog
MessageBoxA
wsprintfA
keybd_event
DefWindowProcA
SendMessageA
TrackPopupMenu
InsertMenuA
CreatePopupMenu
LoadCursorA
SetForegroundWindow
BringWindowToTop
KillTimer
PostQuitMessage
SetTimer
SetWindowTextA
GetDlgItem
LoadStringA
FindWindowA
GetMessageA
TranslateAcceleratorA
GetCursorPos
RegisterClassExA
DispatchMessageA
TranslateMessage
LoadAcceleratorsA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

oleaut32

OleCreatePropertyFrame
SysFreeString

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.erdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c7168111b40b66493a85b64a4bc966fd

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 840B

.data Size: 24KB - Virtual size: 20KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 1KB

.erdata Size: 68KB - Virtual size: 68KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 840B

.data
Size: 24KB - Virtual size: 20KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 1KB

.erdata
Size: 68KB - Virtual size: 68KB