1427b367bfb43394a867ef8b0362ae07ef44b9272f8e26ed8c1b7588525bd8f8

Sharing

Copy URL Twitter E-mail

General

Target

1427b367bfb43394a867ef8b0362ae07ef44b9272f8e26ed8c1b7588525bd8f8
Size

105KB
MD5

a2063b8e97d28681a9ef622f55907b95
SHA1

04780feed599321d7870cad42ba44b8be72136ed
SHA256

1427b367bfb43394a867ef8b0362ae07ef44b9272f8e26ed8c1b7588525bd8f8
SHA512

8230b14a25d421ed43e00994a8235a076ce79a8f58e0edf6cf206b2141cb713650bb7b8308b3f7a6163d0299315196e13b691f64a3674c17faffbd688fec96d1
SSDEEP

1536:54m8zNWGn1uZ0Rdtq5u69/KsV/7PL6vNU7H7xeIB7w4R3xQNPJ5d6dBOFaUY9Q:5L7wdRdtIuZs5f6vG9eEw4ANPJmAaU

Score

N/A

Malware Config

Signatures

Files

1427b367bfb43394a867ef8b0362ae07ef44b9272f8e26ed8c1b7588525bd8f8
.exe windows x86

c6f81b0dfd54c4ceb985fa610ccde4d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
realloc
_setmode
strcmp
free
__p__fmode
fclose
_initterm
printf
strstr
_XcptFilter
_adjust_fdiv
_exit
_acmdln
__p__commode
_except_handler3
calloc
atexit
__set_app_type
exit
signal
__setusermatherr

kernel32

GetModuleHandleW
TerminateProcess
SetFileTime
VirtualProtectEx
LoadLibraryExW
GetCurrentProcessId
GetProcAddress
RemoveDirectoryA

gdi32

GetBitmapBits
GetRgnBox
GetClipRgn
AbortDoc
SetWorldTransform
EndPage
LPtoDP

comctl32

CreatePropertySheetPageA
ImageList_BeginDrag
ImageList_Add
ImageList_Draw
ImageList_SetBkColor
ImageList_DragEnter

oleaut32

SafeArrayPutElement
VariantCopy
GetErrorInfo
LoadTypeLib
VariantInit
SetErrorInfo
SysReAllocStringLen

shell32

SHFileOperationW
Shell_NotifyIconW
SHAppBarMessage
ExtractIconW

advapi32

CopySid
EqualSid
RegCreateKeyExW
CloseServiceHandle
CryptDestroyHash
RegSetValueExA
RegEnumValueA

ole32

CoRegisterMessageFilter
PropVariantClear
RegisterDragDrop
CoRevokeClassObject
StgOpenStorageOnILockBytes

user32

EnableMenuItem

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c6f81b0dfd54c4ceb985fa610ccde4d4

Headers

File Characteristics

Imports

msvcrt

kernel32

gdi32

comctl32

oleaut32

shell32

advapi32

ole32

user32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 40KB - Virtual size: 60KB

.rsrc Size: 59KB - Virtual size: 132KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 40KB - Virtual size: 60KB

.rsrc
Size: 59KB - Virtual size: 132KB