f057adeedfa5766ca659f9c8a7ac9b446d1994759d4d13d7663e221a29f70ea7

Sharing

Copy URL Twitter E-mail

General

Target

f057adeedfa5766ca659f9c8a7ac9b446d1994759d4d13d7663e221a29f70ea7
Size

212KB
MD5

6d8fffe3a52eab9bfded5acd7f64da25
SHA1

3ec4a62be5a6566f9bab3cbbbebb4a791918e249
SHA256

f057adeedfa5766ca659f9c8a7ac9b446d1994759d4d13d7663e221a29f70ea7
SHA512

b33fd29bcc6dd9f388989059d257c9350dbc2139489bf3c4295c4d45704d12f8c7248d18fd7486602170f8008ec7fc8658adea338356cfbc72029c72c1d4faa1
SSDEEP

3072:Bp9qJ0imqb+oSyLytqMxuud33XcGXsYQYlLBdWFkGGut+6a1hdYQllI18+EVVS:Bp9qmihbz1yjxXncGXFQYpeGu0Dhdd

Score

N/A

Malware Config

Signatures

Files

f057adeedfa5766ca659f9c8a7ac9b446d1994759d4d13d7663e221a29f70ea7
.exe windows x86

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

acos
atol

gdi32

CreateDIBitmap
GetDIBits
CreatePalette
CreateBrushIndirect
SetPixel
CreateDIBSection
SetBkColor
CopyEnhMetaFileA

version

VerInstallFileA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

WriteClassStm
CLSIDFromString
CreateOleAdviseHolder
CLSIDFromProgID
GetHGlobalFromStream
CoTaskMemFree
CoDisconnectObject
MkParseDisplayName
StringFromIID

advapi32

RegEnumKeyExA
GetUserNameA
RegOpenKeyA
RegCreateKeyA

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Remove

kernel32

SetErrorMode
GetCommandLineW
EnterCriticalSection
ExitThread
MulDiv
lstrcmpA
lstrlenA
GetProcAddress
GetLocalTime
IsBadReadPtr
GetSystemDefaultLangID
SizeofResource
IsBadHugeReadPtr
LoadLibraryExA
ExitProcess
GetCommandLineA
VirtualAllocEx
WaitForSingleObject
GetModuleHandleA
CreateThread
VirtualAlloc

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
FindTextA

shlwapi

PathFileExistsA
SHDeleteKeyA
SHEnumValueA
SHSetValueA
SHQueryInfoKeyA
SHGetValueA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc6
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc3
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc2
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

Imports

msvcrt

gdi32

version

ole32

advapi32

comctl32

kernel32

comdlg32

shlwapi

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 144KB - Virtual size: 144KB

.Rsrc8 Size: 1KB - Virtual size: 1KB

.Rsrc4 Size: 2KB - Virtual size: 1KB

.Rsrc0 Size: 2KB - Virtual size: 1KB

.Rsrc6 Size: 512B - Virtual size: 189B

.Rsrc3 Size: 1024B - Virtual size: 907B

.Rsrc2 Size: 512B - Virtual size: 313B

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 144KB - Virtual size: 144KB

.Rsrc8
Size: 1KB - Virtual size: 1KB

.Rsrc4
Size: 2KB - Virtual size: 1KB

.Rsrc0
Size: 2KB - Virtual size: 1KB

.Rsrc6
Size: 512B - Virtual size: 189B

.Rsrc3
Size: 1024B - Virtual size: 907B

.Rsrc2
Size: 512B - Virtual size: 313B

.rsrc
Size: 1024B - Virtual size: 920B