d854a08c49f04c4b29a8878146ef0cf0b04d66be19f36db85466ebfa8f90621f

Sharing

Copy URL Twitter E-mail

General

Target

d854a08c49f04c4b29a8878146ef0cf0b04d66be19f36db85466ebfa8f90621f
Size

313KB
MD5

9251671fbba075b3a16eb59c13109da6
SHA1

ded80cc77982dedcc34b592d61ce72ff7b8bfbff
SHA256

d854a08c49f04c4b29a8878146ef0cf0b04d66be19f36db85466ebfa8f90621f
SHA512

2e12870453c91440e9a91617212f64d24e19706b2f4633e332a37245501bd5f54096d6e9880cd7634951ed8fb7347ff1558ce87c9a9dde51e9180de31686fb5a
SSDEEP

6144:JGk/IDniUh8ybb4PHw6uPv6I4GkXa3zEXC6AjMBb8mJ88B6q91uN7:g/b8qEY6Oh4GkXa3zFMPjMEuN7

Score

N/A

Malware Config

Signatures

Files

d854a08c49f04c4b29a8878146ef0cf0b04d66be19f36db85466ebfa8f90621f
.exe windows x86

50ba80c852b2c0ae0e23cca8a56a6b60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

olecli32

BmCopy
GenClone
OleDraw
ErrReconnect
OleCreateLinkFromClip
OleSetHostNames
OleRename
LeQueryBounds
OleRelease
GenCopy
OleClone
GenEnumFormat
LeShow
ObjRename
ObjQuerySize
OleQueryProtocol
OleEnumObjects
DefCreateLinkFromFile
PbGetData
GenEqual
OleCreateFromTemplate
OleSetTargetDevice
DibQueryBounds
ErrShow
OleDelete
PbCreateInvisible
DocWndProc
OleExecute
LeReconnect
MfQueryBounds

ole32

HENHMETAFILE_UserSize
CreateOleAdviseHolder
HMETAFILEPICT_UserFree
CoMarshalInterface
PropVariantCopy
SetErrorInfo
OleCreateFromData
CoGetInterfaceAndReleaseStream
CoReactivateObject
GetHookInterface
HDC_UserMarshal
MonikerRelativePathTo
GetConvertStg
WriteOleStg
HACCEL_UserMarshal
MonikerCommonPrefixWith
WriteStringStream
CreateClassMoniker
CreateDataCache
ReadClassStg
OleDuplicateData
CoSetProxyBlanket
OleCreateLinkEx
GetClassFile
CoFreeAllLibraries
SNB_UserSize
CreateDataAdviseHolder
CreateItemMoniker

kernel32

GetFileTime
QueryPerformanceCounter
WriteProfileStringA
MoveFileExA
GetCurrentConsoleFont
GlobalGetAtomNameW
GetCurrentThread
CreateEventA
SetEndOfFile
GetModuleHandleW
TransactNamedPipe
GetEnvironmentStrings
GetUserDefaultLCID
lstrcatA
FatalAppExitW
LoadLibraryW
GetLocaleInfoW
IsBadStringPtrW

msvfw32

DrawDibTime
ICClose
ICOpen
DrawDibEnd
MCIWndCreateW
GetOpenFileNamePreviewW
DrawDibGetPalette
MCIWndCreate
DrawDibStop
ICSendMessage
ICCompressorChoose
ICSeqCompressFrameEnd
ICSeqCompressFrame
ICInstall
ICRemove
ICOpenFunction
DrawDibDraw
VideoForWindowsVersion
GetOpenFileNamePreviewA
ICLocate
ICDecompress
DrawDibSetPalette
ICImageCompress
DrawDibBegin
ICInfo
DrawDibRealize
MCIWndRegisterClass
DrawDibProfileDisplay

shell32

RealShellExecuteW
SHGetNewLinkInfoA
SHFormatDrive
DllInstall
SHGetFolderPathAndSubDirA
SHGetFolderLocation
StrNCmpIW
DragQueryFileA
SHEmptyRecycleBinA
InternalExtractIconListA
ShellExecuteExW
SHGetIconOverlayIndexA
SHFileOperationA

shlwapi

SHQueryInfoKeyW
PathUnquoteSpacesA
PathIsNetworkPathW
SHRegDeleteUSValueA
PathGetArgsW
PathRemoveFileSpecA
SHRegSetPathA
PathFindOnPathA
SHDeleteEmptyKeyW
SHRegWriteUSValueA
PathCombineA
PathRemoveBackslashA
PathGetDriveNumberA
SHRegDeleteEmptyUSKeyW
StrChrIW
ColorAdjustLuma
PathSetDlgItemPathW
UrlGetLocationW

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ba80c852b2c0ae0e23cca8a56a6b60

Headers

File Characteristics

Imports

olecli32

ole32

kernel32

msvfw32

shell32

shlwapi

Sections

.text Size: 130KB - Virtual size: 129KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 8KB - Virtual size: 62KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 130KB - Virtual size: 129KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 8KB - Virtual size: 62KB

.rsrc
Size: 112KB - Virtual size: 112KB