434975a7d644ed21ee714f25ce295a531a5fa33583f4346816a821ade503a5a9

Sharing

Copy URL Twitter E-mail

General

Target

434975a7d644ed21ee714f25ce295a531a5fa33583f4346816a821ade503a5a9
Size

313KB
MD5

77388594e08654943f75f2526a68b80c
SHA1

6900fe8359f403847e503f8719f448dd50cf5e93
SHA256

434975a7d644ed21ee714f25ce295a531a5fa33583f4346816a821ade503a5a9
SHA512

a8901c5b55d9c51ef94e9d8ebdde7020644f6308532d38cab41a528c718034062d4c75f46b9082bfb2b129afc2e9a17b0c9889ac002b4155a595346c5af4bbaa
SSDEEP

6144:JGk/IDniUh8ybb4PHw6uPv6I4GkXa3zEXC6AjMBb8mJ88B6q91uh:g/b8qEY6Oh4GkXa3zFMPjMEuh

Score

N/A

Malware Config

Signatures

Files

434975a7d644ed21ee714f25ce295a531a5fa33583f4346816a821ade503a5a9
.exe windows x86

50ba80c852b2c0ae0e23cca8a56a6b60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

olecli32

BmCopy
GenClone
OleDraw
ErrReconnect
OleCreateLinkFromClip
OleSetHostNames
OleRename
LeQueryBounds
OleRelease
GenCopy
OleClone
GenEnumFormat
LeShow
ObjRename
ObjQuerySize
OleQueryProtocol
OleEnumObjects
DefCreateLinkFromFile
PbGetData
GenEqual
OleCreateFromTemplate
OleSetTargetDevice
DibQueryBounds
ErrShow
OleDelete
PbCreateInvisible
DocWndProc
OleExecute
LeReconnect
MfQueryBounds

ole32

HENHMETAFILE_UserSize
CreateOleAdviseHolder
HMETAFILEPICT_UserFree
CoMarshalInterface
PropVariantCopy
SetErrorInfo
OleCreateFromData
CoGetInterfaceAndReleaseStream
CoReactivateObject
GetHookInterface
HDC_UserMarshal
MonikerRelativePathTo
GetConvertStg
WriteOleStg
HACCEL_UserMarshal
MonikerCommonPrefixWith
WriteStringStream
CreateClassMoniker
CreateDataCache
ReadClassStg
OleDuplicateData
CoSetProxyBlanket
OleCreateLinkEx
GetClassFile
CoFreeAllLibraries
SNB_UserSize
CreateDataAdviseHolder
CreateItemMoniker

kernel32

GetFileTime
QueryPerformanceCounter
WriteProfileStringA
MoveFileExA
GetCurrentConsoleFont
GlobalGetAtomNameW
GetCurrentThread
CreateEventA
SetEndOfFile
GetModuleHandleW
TransactNamedPipe
GetEnvironmentStrings
GetUserDefaultLCID
lstrcatA
FatalAppExitW
LoadLibraryW
GetLocaleInfoW
IsBadStringPtrW

msvfw32

DrawDibTime
ICClose
ICOpen
DrawDibEnd
MCIWndCreateW
GetOpenFileNamePreviewW
DrawDibGetPalette
MCIWndCreate
DrawDibStop
ICSendMessage
ICCompressorChoose
ICSeqCompressFrameEnd
ICSeqCompressFrame
ICInstall
ICRemove
ICOpenFunction
DrawDibDraw
VideoForWindowsVersion
GetOpenFileNamePreviewA
ICLocate
ICDecompress
DrawDibSetPalette
ICImageCompress
DrawDibBegin
ICInfo
DrawDibRealize
MCIWndRegisterClass
DrawDibProfileDisplay

shell32

RealShellExecuteW
SHGetNewLinkInfoA
SHFormatDrive
DllInstall
SHGetFolderPathAndSubDirA
SHGetFolderLocation
StrNCmpIW
DragQueryFileA
SHEmptyRecycleBinA
InternalExtractIconListA
ShellExecuteExW
SHGetIconOverlayIndexA
SHFileOperationA

shlwapi

SHQueryInfoKeyW
PathUnquoteSpacesA
PathIsNetworkPathW
SHRegDeleteUSValueA
PathGetArgsW
PathRemoveFileSpecA
SHRegSetPathA
PathFindOnPathA
SHDeleteEmptyKeyW
SHRegWriteUSValueA
PathCombineA
PathRemoveBackslashA
PathGetDriveNumberA
SHRegDeleteEmptyUSKeyW
StrChrIW
ColorAdjustLuma
PathSetDlgItemPathW
UrlGetLocationW

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ba80c852b2c0ae0e23cca8a56a6b60

Headers

File Characteristics

Imports

olecli32

ole32

kernel32

msvfw32

shell32

shlwapi

Sections

.text Size: 130KB - Virtual size: 129KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 8KB - Virtual size: 62KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 130KB - Virtual size: 129KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 8KB - Virtual size: 62KB

.rsrc
Size: 112KB - Virtual size: 112KB