4472bcae0180552d4b493175e6cba6051ca68c236ec0eb5ebf6a5febffc1e4bc

Sharing

Copy URL Twitter E-mail

General

Target

4472bcae0180552d4b493175e6cba6051ca68c236ec0eb5ebf6a5febffc1e4bc
Size

212KB
MD5

6ab2accfc5657702f635e64dda3a7760
SHA1

d3f19559faa1d4f37a4b8a7badd57777d71073a7
SHA256

4472bcae0180552d4b493175e6cba6051ca68c236ec0eb5ebf6a5febffc1e4bc
SHA512

a1e3b19b9d3b9821ec317f1752f6913b978dc97f0fe4420ecbaa5d29d4d121f056fcacafaa5ad80ad1dd456f7733bb9ceb412240d4403066f352c521f5777be4
SSDEEP

3072:Bp9qJ0imqb+oSyLytqMxuud33XcGXsYQYlLBdyFkGGut+6a1hdYQllI18+EVVS:Bp9qmihbz1yjxXncGXFQYpqGu0Dhdd

Score

N/A

Malware Config

Signatures

Files

4472bcae0180552d4b493175e6cba6051ca68c236ec0eb5ebf6a5febffc1e4bc
.exe windows x86

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

acos
atol

gdi32

CreateDIBitmap
GetDIBits
CreatePalette
CreateBrushIndirect
SetPixel
CreateDIBSection
SetBkColor
CopyEnhMetaFileA

version

VerInstallFileA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

WriteClassStm
CLSIDFromString
CreateOleAdviseHolder
CLSIDFromProgID
GetHGlobalFromStream
CoTaskMemFree
CoDisconnectObject
MkParseDisplayName
StringFromIID

advapi32

RegEnumKeyExA
GetUserNameA
RegOpenKeyA
RegCreateKeyA

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Remove

kernel32

SetErrorMode
GetCommandLineW
EnterCriticalSection
ExitThread
MulDiv
lstrcmpA
lstrlenA
GetProcAddress
GetLocalTime
IsBadReadPtr
GetSystemDefaultLangID
SizeofResource
IsBadHugeReadPtr
LoadLibraryExA
ExitProcess
GetCommandLineA
VirtualAllocEx
WaitForSingleObject
GetModuleHandleA
CreateThread
VirtualAlloc

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
FindTextA

shlwapi

PathFileExistsA
SHDeleteKeyA
SHEnumValueA
SHSetValueA
SHQueryInfoKeyA
SHGetValueA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc6
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc3
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc2
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

Imports

msvcrt

gdi32

version

ole32

advapi32

comctl32

kernel32

comdlg32

shlwapi

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 144KB - Virtual size: 144KB

.Rsrc8 Size: 1KB - Virtual size: 1KB

.Rsrc4 Size: 2KB - Virtual size: 1KB

.Rsrc0 Size: 2KB - Virtual size: 1KB

.Rsrc6 Size: 512B - Virtual size: 189B

.Rsrc3 Size: 1024B - Virtual size: 907B

.Rsrc2 Size: 512B - Virtual size: 313B

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 144KB - Virtual size: 144KB

.Rsrc8
Size: 1KB - Virtual size: 1KB

.Rsrc4
Size: 2KB - Virtual size: 1KB

.Rsrc0
Size: 2KB - Virtual size: 1KB

.Rsrc6
Size: 512B - Virtual size: 189B

.Rsrc3
Size: 1024B - Virtual size: 907B

.Rsrc2
Size: 512B - Virtual size: 313B

.rsrc
Size: 1024B - Virtual size: 920B