0ff02a47eb02b6a0ac8ba2d27ca87703377be1acdd042a6ec1eeca5ed989ed0a

Sharing

Copy URL

Twitter E-mail

General

Target

0ff02a47eb02b6a0ac8ba2d27ca87703377be1acdd042a6ec1eeca5ed989ed0a
Size

147KB
MD5

6006f7f43c13eeb593345f04a1ea903d
SHA1

c815d6237bd7562ab5179fe7bb9060fc54a91aa3
SHA256

0ff02a47eb02b6a0ac8ba2d27ca87703377be1acdd042a6ec1eeca5ed989ed0a
SHA512

ce4020baa5453d89c18183591bf6e59e5fe74ce48689a03538fecc16197a7b5a9aa08c8fe0fd795194e561027e227b20631f7a82e40e5c4894894a007deff55e
SSDEEP

3072:QVsud4GVUb8MT0rNyMSqG+x3sW8OLQ/qV4YUa9PPruCLK4Hj3WvU:3ud5kT0JyMSqG+ZtCYUa9XruCLQ8

Score

N/A

Malware Config

Signatures

Files

0ff02a47eb02b6a0ac8ba2d27ca87703377be1acdd042a6ec1eeca5ed989ed0a
.exe windows x86

17ae3ab0b41a965a0399269188ff30f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStartupInfoA
GetTempPathW
IsDBCSLeadByte
GetCurrentDirectoryA
GetSystemTimeAsFileTime
GetModuleHandleA
VirtualProtect
VirtualFree
CreateProcessA
DeleteFileW
FreeEnvironmentStringsW
GlobalReAlloc
UnhandledExceptionFilter

msvcrt

exit
fsetpos
_acmdln
isspace
_except_handler3
_XcptFilter
__set_app_type
_unlink
pow
_adjust_fdiv
wcscmp
__getmainargs
_vsnwprintf
_initterm
__p__commode
strcat
_read
__setusermatherr
log
_fdopen
localtime
__p__fmode

user32

DrawEdge
GetMenuItemCount
DrawTextA
GetCursorPos
WindowFromPoint
ReleaseCapture
SetMenu
IsRectEmpty
SetScrollInfo
CharLowerA
GetTopWindow

gdi32

GetTextExtentPointW
OffsetClipRgn
CreateSolidBrush
CreateFontA
GetWinMetaFileBits
StartDocA
EndPath
CreateICA
SetWindowExtEx
DPtoLP
TextOutA
GetROP2
Escape
CreateDCA

oleaut32

VariantCopyInd
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayPutElement
SysFreeString
SafeArrayGetUBound
VariantInit
SysReAllocStringLen
SysStringByteLen

ole32

OleSetMenuDescriptor
OleIsCurrentClipboard
OleRun
CLSIDFromString
IsAccelerator

advapi32

GetUserNameA
RegQueryInfoKeyA
CloseServiceHandle
GetSecurityDescriptorDacl
CryptDestroyHash
RegQueryInfoKeyW
LookupPrivilegeValueA

shell32

ExtractIconExW
ExtractIconExA

comctl32

ImageList_SetIconSize
ImageList_Replace
ImageList_Destroy
ImageList_Write

version

VerInstallFileW
VerQueryValueW

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uemspma
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

17ae3ab0b41a965a0399269188ff30f4

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

oleaut32

ole32

advapi32

shell32

comctl32

version

Sections

.text Size: 63KB - Virtual size: 63KB

.data Size: 48KB - Virtual size: 48KB

.rsrc Size: 34KB - Virtual size: 62KB

uemspma Size: - Virtual size: 4KB

.text
Size: 63KB - Virtual size: 63KB

.data
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 34KB - Virtual size: 62KB

uemspma
Size: - Virtual size: 4KB