84f3f0687924b43ef7c2fbb13d7923e3fcd56c548dd7303f0bcef79c638d00b6

Sharing

Copy URL Twitter E-mail

General

Target

84f3f0687924b43ef7c2fbb13d7923e3fcd56c548dd7303f0bcef79c638d00b6
Size

248KB
MD5

089924df217c833c4fd1400636dafd18
SHA1

2005587ae7b29c55a8a85de6ff1eabbddbc39bbb
SHA256

84f3f0687924b43ef7c2fbb13d7923e3fcd56c548dd7303f0bcef79c638d00b6
SHA512

e91b6779f5ab05d24bb0d045c5e3efd0617909ad5e057a2a627743b3fb492f2fb760dede75f60af76e2908491fb508c2deb45b30050e469b657780d07af4a608
SSDEEP

3072:tEZ1mhjc4CMBbs6U29xKgEucpUeKMRWtdj3wMOKad7DBqcvemmFAjDo1hPPi1d1k:tCIjrCMBbsJ2S4t+idWXMCshP61dzBD

Score

N/A

Malware Config

Signatures

Files

84f3f0687924b43ef7c2fbb13d7923e3fcd56c548dd7303f0bcef79c638d00b6
.exe windows x86

0d1664a496e695ca4b334a50e374db86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStringTypeW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

user32

CreateMDIWindowW
SetDebugErrorLevel
WaitMessage
GetDlgItemInt
DeleteMenu
SystemParametersInfoW
AttachThreadInput
DlgDirSelectComboBoxExW
GetPropW
GetMenuItemInfoA

oleaut32

CreateStdDispatch
SafeArrayRedim
VarFormatCurrency
SafeArrayDestroyData
SafeArrayPtrOfIndex
CreateTypeLi
VarDiv
VarSu
VariantChangeType
CreateDispTypeInfo

comctl32

ImageList_SetImageCount
ImageList_Remove
ImageList_Write
ImageList_ReplaceIcon
FlatSB_SetScrollRange
ImageList_Read
ImageList_Create
ImageList_Add
ImageList_Merge

shlwapi

PathIsRootW
PathIsSameRootW
PathAddBackslashA
PathIsRootA
PathUnquoteSpacesA
SHGetValueA
PathIsUNCW
ChrCmpIW

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d1664a496e695ca4b334a50e374db86

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

comctl32

shlwapi

Sections

.text Size: 151KB - Virtual size: 150KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 1KB - Virtual size: 238KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 151KB - Virtual size: 150KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 1KB - Virtual size: 238KB

.rsrc
Size: 6KB - Virtual size: 5KB