ebf6a1b8031e0aa10d4d036ee10abf7d819c173a0a305b77fcd9228296cfa8e5

Sharing

Copy URL Twitter E-mail

General

Target

ebf6a1b8031e0aa10d4d036ee10abf7d819c173a0a305b77fcd9228296cfa8e5
Size

97KB
MD5

79366891c6af5778070a1d463ce9bfc6
SHA1

b1dd4b44d42b9172d2a0d4507001706ea0c8aac8
SHA256

ebf6a1b8031e0aa10d4d036ee10abf7d819c173a0a305b77fcd9228296cfa8e5
SHA512

65ff67d47a6747e486bf439bfbd256f44206b71c5a3146882ec1b491f83c30fe19db086399a19ee983c62ee662ca5bae966808766891ac3d27f2fb67dab91055
SSDEEP

1536:vqlgC4+Ko+TC8ugBz10StuUOv9l+ZkL/+i5GiPc/11zqrqQFnQWKYIGu:FS8Xu2zCv9AKLGi5nU/1lqrbQWKnGu

Score

N/A

Malware Config

Signatures

Files

ebf6a1b8031e0aa10d4d036ee10abf7d819c173a0a305b77fcd9228296cfa8e5
.exe windows x86

3ba1d59171b44bd6486cba73b14d7292

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_except_handler3
_initterm
_exit
__p__commode
sprintf
_acmdln
__p__fmode
__setusermatherr
_adjust_fdiv
strcmp
strcpy
signal
free
calloc
getenv
__set_app_type

kernel32

WriteFile
GetStartupInfoA
VirtualAlloc
FreeLibrary
ReadFile
GetConsoleOutputCP
GetUserDefaultLangID
LoadLibraryExW
GetFileAttributesW
GetProcAddress
GetLocaleInfoW
GetCPInfo
GetShortPathNameA
FreeEnvironmentStringsW
GetCurrentProcess
IsBadWritePtr
GlobalAlloc
lstrcpynA
IsDebuggerPresent

user32

RegisterClipboardFormatA
LoadStringA
CallNextHookEx
GetMenu
GetMenuState
SetWindowPos
IsChild
LoadIconA
RemovePropA
FillRect
EnumThreadWindows
EnableMenuItem
SendMessageA
GetWindowTextA

ole32

CoRegisterClassObject
StringFromGUID2
ReleaseStgMedium
OleSetMenuDescriptor
OleDraw
IIDFromString
IsEqualGUID
StgOpenStorageOnILockBytes
CoGetMalloc
OleUninitialize
CreateBindCtx
CoLoadLibrary

gdi32

BitBlt
SetMetaFileBitsEx
GetBkColor
CreateDCA
CreatePen
CreateEnhMetaFileA
SelectObject
InvertRgn
EnumEnhMetaFile
GetMapMode
SetTextColor
CopyMetaFileW

advapi32

RegEnumKeyA
GetLengthSid
RegFlushKey
CryptHashData
EqualSid
AddAccessAllowedAce
OpenServiceW
QueryServiceStatus
RegEnumKeyExA
RegEnumValueA
GetUserNameA
DeleteService

oleaut32

SafeArrayGetUBound
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
LoadTypeLib
VariantCopy
SafeArrayUnaccessData
GetActiveObject
VariantClear

comctl32

InitCommonControlsEx
ImageList_Replace
ImageList_EndDrag
CreateToolbarEx
PropertySheetA
DestroyPropertySheetPage
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_DragEnter
ImageList_ReplaceIcon

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ba1d59171b44bd6486cba73b14d7292

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

ole32

gdi32

advapi32

oleaut32

comctl32

Sections

.text Size: 55KB - Virtual size: 55KB

.data Size: 25KB - Virtual size: 24KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 55KB - Virtual size: 55KB

.data
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 16KB - Virtual size: 15KB