10854ac7e406b87c08a875b7eaa19abfcc2d210331980ea203eabecde561e73c

Sharing

Copy URL Twitter E-mail

General

Target

10854ac7e406b87c08a875b7eaa19abfcc2d210331980ea203eabecde561e73c
Size

40KB
MD5

7c434f96219224cef3a2bed8aa6259a9
SHA1

ae4dc9d20e0a644d01fece5c206e561ed1945676
SHA256

10854ac7e406b87c08a875b7eaa19abfcc2d210331980ea203eabecde561e73c
SHA512

9a449d5a9bdb387b3d560bfc0435fff8b93f37f8fe51da695a0db4eab66760c5a4f2bc9a254e23cf96687c0e8f47beac96ba1c05aa6c1b11d5102b08e602127a
SSDEEP

768:GZ70XMoVVxiwI0YzjNZombSxHFyq34M6NoWLv171J6hIeoaidQ:UXJ30ywp34M6Fv16hIRaidQ

Score

N/A

Malware Config

Signatures

Files

10854ac7e406b87c08a875b7eaa19abfcc2d210331980ea203eabecde561e73c
.exe windows x86

119010e51ab3a0a7f4a401284f37a517

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove

advapi32

RegSetValueW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
RegQueryValueW
RegEnumKeyExW
RegOpenKeyW
RegSetValueExW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyW

kernel32

FindFirstFileW
SetLastError
GetProcAddress
GetModuleHandleW
ExpandEnvironmentStringsW
MultiByteToWideChar
SetFilePointer
ReadFile
CreateFileW
LocalFree
FreeResource
LockResource
LoadResource
CloseHandle
FreeLibrary
EnumResourceNamesW
LoadLibraryExW
SetErrorMode
GetPrivateProfileStringW
WriteFile
FindClose
GlobalSize
GlobalReAlloc
GlobalUnlock
DeleteFileW
GetTempFileNameW
GetEnvironmentVariableW
lstrlenA
GetModuleFileNameW
RemoveDirectoryW
SetFileAttributesW
GetLastError
MoveFileW
MulDiv
WritePrivateProfileStringW
WinExec
LoadLibraryW
GetThreadLocale
ExitProcess
GetStartupInfoW
GetCommandLineW
SearchPathW
GetWindowsDirectoryW
GetSystemTimeAsFileTime
CreateProcessW
Sleep
GlobalAlloc
GlobalLock
lstrcmpW
GetPrivateProfileSectionW
lstrcpyW
lstrcatW
GlobalFree
lstrcpynW
lstrlenW
lstrcmpiW
LocalAlloc
FindResourceW

gdi32

GetTextExtentPointW
GetTextExtentExPointW
GetDeviceCaps

user32

LoadCursorW
SetCursor
SystemParametersInfoW
wvsprintfW
GetSystemMetrics
GetLastActivePopup
MessageBoxW
GetDlgItem
PeekMessageW
DispatchMessageW
SendDlgItemMessageW
GetDC
GetClientRect
ReleaseDC
DestroyWindow
CreateDialogParamW
SetDlgItemTextW
GetSystemMenu
EnableMenuItem
CopyRect
LookupIconIdFromDirectory
DdeDisconnectList
DdeUninitialize
SetForegroundWindow
DdeInitializeW
DdeCreateStringHandleW
DdeFreeStringHandle
GetDesktopWindow
GetClassNameW
DdeConnectList
DdeQueryNextServer
FindWindowW
GetWindow
SetPropW
CharNextW
LoadStringW
wsprintfW
DdeClientTransaction
GetPropW

comctl32

ord236
ord73
ord17
ord324
ord235
ord358
ord334
ord328
ord332
ord365
ord320
ord321
ord326
ord323

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shell32

SHChangeNotify
ord57
ord39
ord175
ord36
ord49
ord45
ord165
ord119
ord58
ord52
ord56
ord51
SHAddToRecentDocs
ord79
ord164
ord35
ord34
ord94
ord157
ord23
SHGetSpecialFolderLocation
ord128
ord31
ord32
ord29
FindExecutableW
ord37
ord33
ord25
ord195
ord196
ShellExecuteExW
SHGetPathFromIDListW
ord96
ord155
ord63

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

119010e51ab3a0a7f4a401284f37a517

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comctl32

version

shell32

Sections

.text Size: 30KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 608B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 30KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 608B

.rsrc
Size: 8KB - Virtual size: 8KB