c468acb45e51dba9c530c5bab8a4278ec445a3fe0bcf74cfbce2e8da64381b72

Sharing

Copy URL Twitter E-mail

General

Target

c468acb45e51dba9c530c5bab8a4278ec445a3fe0bcf74cfbce2e8da64381b72
Size

445KB
MD5

91ba6c1ff83bfbc9862f606d5c40dae1
SHA1

eeec48196cb8b0a830b72a05201b806950b58b6e
SHA256

c468acb45e51dba9c530c5bab8a4278ec445a3fe0bcf74cfbce2e8da64381b72
SHA512

aa68c6a1f47deb00f8ce0670c92e1d3bdb7e27962cdba8ff78a8d1b3db1998b0ded31db11d99f1790da25ed0258c8e0cb2bdb3d3d7749c50dfa4faaf28d15e3a
SSDEEP

6144:XNV4ugLhgjNszZf1RrJbHCWIY19XlnsMwm5AMKktMLgYBQE4Nu:XNyugLhbx3rVBLlnss5ABbXQEUu

Score

N/A

Malware Config

Signatures

Files

c468acb45e51dba9c530c5bab8a4278ec445a3fe0bcf74cfbce2e8da64381b72
.exe windows x86

acba95cd6e2f8a1cb4148ef6f684553d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
ChooseColorA
ChooseFontA

comctl32

ImageList_Write
ImageList_SetDragCursorImage
ImageList_Remove
InitCommonControlsEx
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_Destroy

sensapi

IsNetworkAlive

sfc

SfcIsFileProtected

xolehlp

ord7

kernel32

DeleteCriticalSection
VirtualProtect
SetStdHandle
CloseHandle
HeapReAlloc
CreateFileA
HeapAlloc
HeapFree
SetTapeParameters
HeapCreate
GetProcAddress
GetLocalTime
GetSystemInfo
LoadLibraryExA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
VirtualFree
VirtualAlloc
HeapSize
SetUnhandledExceptionFilter
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
IsBadCodePtr
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 225KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acba95cd6e2f8a1cb4148ef6f684553d

Headers

File Characteristics

Imports

comdlg32

comctl32

sensapi

sfc

xolehlp

kernel32

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 223KB - Virtual size: 223KB

.data Size: 225KB - Virtual size: 575KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 223KB - Virtual size: 223KB

.data
Size: 225KB - Virtual size: 575KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB