b39cdfad2b3ce640918026f6725303ada5a05307d5e0e07bd1379beb5d8356e5

Sharing

Copy URL Twitter E-mail

General

Target

b39cdfad2b3ce640918026f6725303ada5a05307d5e0e07bd1379beb5d8356e5
Size

297KB
MD5

905eca506ce1a49aec2a69078cbbbac9
SHA1

1d51fe0871a66981db547208719bf227667e1107
SHA256

b39cdfad2b3ce640918026f6725303ada5a05307d5e0e07bd1379beb5d8356e5
SHA512

279605de177f44f4ff7aed3a5e01c0b483a13316db4134fb23d3bbd7889286966b079e40c9f8b572320d00265f83f8113fe6a7eceaf4b62b125ca21462ab9219
SSDEEP

6144:7/jHJp+I6rxKnayF83Jc5t6apeS1Er/WROyIi:7bpp4xKnaj3Jc55pR2mOyIi

Score

N/A

Malware Config

Signatures

Files

b39cdfad2b3ce640918026f6725303ada5a05307d5e0e07bd1379beb5d8356e5
.exe windows x86

d62cd0b56b855be54aea21a963a8ee60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

user32

EqualRect
GetDC
ReleaseDC
SystemParametersInfoA
GetSysColor
CharNextW
IsCharAlphaNumericA
LoadCursorA
GetSystemMetrics
GetDoubleClickTime

kernel32

FindResourceExW
CreateMutexA
DeleteFileW
LoadResource
ReleaseMutex
LocalAlloc
lstrlenW
HeapReAlloc
HeapSize
SizeofResource
CopyFileW
GetModuleHandleA
LocalFree
GetUserDefaultLangID
GetModuleHandleW
DeleteFileA
FindResourceW
WaitForSingleObject
HeapFree
HeapDestroy
FindFirstFileA
IsDBCSLeadByte
GetCurrentDirectoryW
GetFullPathNameW
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
DeleteCriticalSection
FindClose
EnterCriticalSection
RaiseException
UnhandledExceptionFilter
IsDebuggerPresent
GetFullPathNameA
LockResource
lstrlenA
GetProcessHeap
CloseHandle
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapAlloc
SetUnhandledExceptionFilter
GetCurrentDirectoryA
IsValidLocale
VirtualAllocEx
lstrcmpA

oleaut32

SysStringByteLen
VariantInit
VarBstrCmp
SysFreeString
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
RegisterTypeLi
UnRegisterTypeLi
VariantChangeType
SysStringLen
VarBstrCat

gdi32

GetDeviceCaps
CreatePen
CreateSolidBrush

shlwapi

PathFileExistsW
PathCanonicalizeW
PathRenameExtensionW
PathIsRelativeW
PathRemoveFileSpecW
PathStripToRootW
PathIsURLW

security

ExportSecurityContext
UnsealMessage
AddSecurityPackageA
MakeSignature

uniplat

UnimodemNotifyTSP
StopMonitorThread

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 261KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d62cd0b56b855be54aea21a963a8ee60

Headers

File Characteristics

Imports

ole32

advapi32

user32

kernel32

oleaut32

gdi32

shlwapi

security

uniplat

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 261KB - Virtual size: 264KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 261KB - Virtual size: 264KB

.rsrc
Size: 10KB - Virtual size: 10KB