519382f1ee061122a78dca36d10d8f37a5c04d6256f25e82e1d480a445b9aa56

Sharing

Copy URL Twitter E-mail

General

Target

519382f1ee061122a78dca36d10d8f37a5c04d6256f25e82e1d480a445b9aa56
Size

152KB
MD5

605586c576c1fbd65441aaf58a249589
SHA1

7dd11b4d619d08d9c3a3b87cc4ac1d07d45cdacf
SHA256

519382f1ee061122a78dca36d10d8f37a5c04d6256f25e82e1d480a445b9aa56
SHA512

acd8b3eefa5c9e8443d2294a7cc2e43a7768835e48d3495b6209609f66c44a1a631b212a94d2c5c3bd364dedc5f6e26ea0b324b611e4351c8e0d9721aac1db62
SSDEEP

3072:BGiLfadU7robUejiMF5Y73/mWNoc+DdIyw/8jNcb5v7/sj1B8:BhLfai7rooeNDYKWNocKdIyy8jNcdzQ8

Score

N/A

Malware Config

Signatures

Files

519382f1ee061122a78dca36d10d8f37a5c04d6256f25e82e1d480a445b9aa56
.exe windows x86

b640340a52524836e16ab88cbacd7cd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

UnhookWindowsHookEx
EnableMenuItem
GetScrollPos
EqualRect
SetWindowTextA
SetWindowPos
GetSysColorBrush
GetSysColor
GetMessageA
EnumWindows
PostQuitMessage
GetSubMenu
FrameRect

kernel32

RtlUnwind
ExitProcess
GetACP
GetCurrentProcessId
GetOEMCP
GetFileAttributesA
GetTimeZoneInformation
VirtualAllocEx
GetTickCount
FileTimeToSystemTime
GetThreadLocale
GetStartupInfoA
GetSystemTime
InterlockedExchange
SetUnhandledExceptionFilter
GetTempPathA

gdi32

SetViewportExtEx
DPtoLP
SelectClipPath
FillRgn
CreateCompatibleBitmap
GetMapMode
CopyEnhMetaFileA
ExcludeClipRect
CreateICW

ole32

CoInitialize
CoRevokeClassObject
CoCreateInstance
StringFromGUID2
OleRun
CoTaskMemRealloc
CoInitializeSecurity
DoDragDrop
StgOpenStorage

advapi32

CryptHashData
RegQueryValueExW
FreeSid
AdjustTokenPrivileges
GetSecurityDescriptorDacl
CheckTokenMembership
RegCreateKeyA
QueryServiceStatus
RegCreateKeyExW
GetUserNameA

msvcrt

strcspn
fflush
signal
__setusermatherr
iswspace
_strdup
_fdopen
fprintf
__getmainargs
raise
strlen
_flsbuf
_mbscmp
__initenv
_CIpow
_lock
strncpy
puts

comctl32

ImageList_DragEnter
ImageList_SetIconSize
CreatePropertySheetPageA
ImageList_GetBkColor
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_LoadImageW
InitCommonControls
ImageList_Destroy
ImageList_Write
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetIconSize

shell32

DragQueryFileA
ShellExecuteW
SHGetPathFromIDList
SHBrowseForFolderA
DragQueryFileW
DragAcceptFiles
ExtractIconW
ExtractIconExW
ShellExecuteEx
DoEnvironmentSubstW
CommandLineToArgvW

oleaut32

SafeArrayPtrOfIndex
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayRedim
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayCreate
VariantCopy

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b640340a52524836e16ab88cbacd7cd7

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 33KB - Virtual size: 33KB

.data Size: 39KB - Virtual size: 39KB

.rsrc Size: 78KB - Virtual size: 80KB

.text
Size: 33KB - Virtual size: 33KB

.data
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 78KB - Virtual size: 80KB