f5a919c6c8ec4d42b4731a128bc72e264c1c850256cab67a2da560d4367defae

Sharing

Copy URL Twitter E-mail

General

Target

f5a919c6c8ec4d42b4731a128bc72e264c1c850256cab67a2da560d4367defae
Size

304KB
MD5

00dd3819282a5f715cb1f99be43e7fc0
SHA1

fdbaff7f0b017126e055c4c61baf66658cac48cd
SHA256

f5a919c6c8ec4d42b4731a128bc72e264c1c850256cab67a2da560d4367defae
SHA512

e3b9186c4a199edd186487b181bbc6c02eaaa7670baa456313ff9685f0c95c6da848ff2cd78cb76dbfc01599b05e7d13d89b9944265e271df5e6741ba152803d
SSDEEP

6144:dF/k4I4latN28geblPiHo6+smTkCXmvh:E4MN2twlWoPxlXmv

Score

N/A

Malware Config

Signatures

Files

f5a919c6c8ec4d42b4731a128bc72e264c1c850256cab67a2da560d4367defae
.exe windows x86

7d6fc56d6a9a7644d4acf6a06442af4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemFree
OleRegEnumVerbs
OleUninitialize
OleRegGetUserType
StringFromGUID2
OleSetContainedObject
OleInitialize
OleRegGetMiscStatus
CoFreeUnusedLibraries
CoCreateInstance
CreateStreamOnHGlobal

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

ExtTextOutW
PtVisible
DeleteObject
CreateDCW
SetTextAlign
CreateCompatibleBitmap
GetMapMode
GetDeviceCaps
PolyBezier
OffsetViewportOrgEx
CreateBitmap
GetRgnBox
GetBkMode
CreatePatternBrush
AbortDoc
DeleteDC
RestoreDC
GetStockObject
GetObjectW
PtInRegion
SelectObject
GetTextMetricsW
BitBlt
SetAbortProc
SaveDC
GetPaletteEntries

winmm

waveOutWrite
waveInClose
waveInPrepareHeader
mixerGetLineControlsA
PlaySoundW
waveInGetNumDevs
mixerGetControlDetailsA
waveOutPrepareHeader
waveOutOpen
waveInStart
waveInOpen
waveInUnprepareHeader
waveOutRestart
waveInReset
waveInAddBuffer
mixerGetLineInfoA
waveOutPause
waveOutReset

comctl32

PropertySheetA
DestroyPropertySheetPage
ImageList_LoadImageA
ImageList_EndDrag
ImageList_Create
ImageList_Replace
_TrackMouseEvent
ImageList_DragMove
ImageList_Remove
ImageList_ReplaceIcon
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_GetIcon
ImageList_AddMasked
ImageList_DragLeave
ImageList_SetBkColor
ImageList_Draw
ord17
CreatePropertySheetPageA
ImageList_Destroy
ImageList_Add
ImageList_GetIconSize
ImageList_GetImageCount

user32

TranslateMDISysAccel
RegisterClassExW
RegisterClassW

kernel32

ExitProcess
RaiseException
lstrcmpW
DeleteFileA
GetEnvironmentStrings
GetModuleFileNameA
GetCommandLineW
LockFile
InitializeCriticalSection
WaitForSingleObject
CreateFileA
GetVersionExA
ReadFile
GlobalMemoryStatus
SizeofResource
GetThreadLocale
Sleep
GetModuleHandleW
FileTimeToSystemTime
FormatMessageA
IsBadReadPtr
MoveFileW
LCMapStringW
lstrcpynA
WideCharToMultiByte
FlushFileBuffers
VirtualProtect
HeapCreate
HeapSize
MulDiv
SetFileTime
SetEvent
SetEndOfFile
GetSystemTime
GetSystemInfo
SetLastError
LocalAlloc
GetUserDefaultLCID
TlsAlloc
HeapDestroy
RtlUnwind
CreateDirectoryA
QueryPerformanceCounter
InterlockedIncrement
IsDebuggerPresent
HeapFree
IsValidCodePage
HeapAlloc
SetUnhandledExceptionFilter
GetStringTypeA
GetFileTime
CloseHandle
lstrlenA
GetCurrentProcessId
GetTimeFormatA
LoadLibraryA
WriteFile
GetModuleFileNameW
GetProcessHeap
FreeLibrary
GetFileSize
GetStringTypeExW
SetConsoleCtrlHandler
GetCurrentThreadId
SetThreadPriority
FreeEnvironmentStringsW
CreateFileW
IsValidLocale
FreeEnvironmentStringsA
MultiByteToWideChar
GetLastError
SetEnvironmentVariableA
SetFilePointer
lstrcpyA
VirtualAlloc
SystemTimeToFileTime
GlobalFlags
IsBadWritePtr
GetFullPathNameW
GlobalFree
VirtualFree
GetEnvironmentStringsW
WriteConsoleA
TlsFree
FatalAppExitA
GetACP
GetStdHandle
GetCurrentThread
TlsSetValue
lstrlenW
CompareStringA
SetStdHandle
FreeResource
GlobalUnlock
UnhandledExceptionFilter
TerminateProcess
FileTimeToLocalFileTime
CompareStringW
ExitThread
GetModuleHandleA
GetTempPathA
LocalFree
IsBadCodePtr
GlobalDeleteAtom
DeleteCriticalSection
GetSystemDirectoryA
GetTickCount
SetHandleCount
GetDateFormatA
InterlockedCompareExchange
EnterCriticalSection
LockResource
CreateFileMappingA
GetTimeZoneInformation
TlsGetValue
GetLocalTime
GetFileType
MapViewOfFile
GetLocaleInfoA
GetVersion
GetSystemTimeAsFileTime
GetCurrentProcess
CreateMutexW
GetStartupInfoW
GlobalAlloc
GetProcAddress
GetCPInfo
GetLocaleInfoW
VirtualQuery
GetOEMCP
LoadResource
HeapReAlloc
GetStartupInfoA
GetCommandLineA
LocalFileTimeToFileTime
GetStringTypeW
lstrcmpA
GetFileAttributesA
FindFirstFileW
InterlockedDecrement
LeaveCriticalSection
CreateThread
LCMapStringA
GlobalSize
InterlockedExchange
SuspendThread
UnlockFile

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d6fc56d6a9a7644d4acf6a06442af4f

Headers

File Characteristics

Imports

ole32

version

gdi32

winmm

comctl32

user32

kernel32

Sections

.text Size: 64KB - Virtual size: 61KB

.rdata Size: 76KB - Virtual size: 73KB

.data Size: 44KB - Virtual size: 73KB

.rsrc Size: 116KB - Virtual size: 112KB

.text
Size: 64KB - Virtual size: 61KB

.rdata
Size: 76KB - Virtual size: 73KB

.data
Size: 44KB - Virtual size: 73KB

.rsrc
Size: 116KB - Virtual size: 112KB