ac22dc0e81a23d7eec42b5c542cacce44a4a05f5f40f08f126120337eb86d3e8

General

Target

ac22dc0e81a23d7eec42b5c542cacce44a4a05f5f40f08f126120337eb86d3e8
Size

722KB
MD5

a08f49650bc7d263028ef8cee8fe8d50
SHA1

1f5aa60f79e06188ea119545ea6dae2c4e27b3dc
SHA256

ac22dc0e81a23d7eec42b5c542cacce44a4a05f5f40f08f126120337eb86d3e8
SHA512

2266cc5e030332aa0cec28c962aaf995268b5d038613b751b00f6f93d73e81f8ce8f6384de2f224d7f8183011c24a85024d67e835494a42231d35e24dbf2e607
SSDEEP

12288:D79FB6+6400XPjg5nrRNfrw0HCOUxnWEuHKFJZoWB48c74lOVtiJ54slEbGTBUpK:/9FsTcPoUE9dqFjoSn4bBSTBUplp4/AE

Score

N/A

Malware Config

Signatures

Files

ac22dc0e81a23d7eec42b5c542cacce44a4a05f5f40f08f126120337eb86d3e8
.exe windows x86

0c55dce0e772427ca143e7d9361b6621

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragAcceptFiles
SHGetMalloc
StrChrA
SHFileOperationA
SHCreateShellItem
SHChangeNotify
DragFinish
FindExecutableA
SHGetDesktopFolder
SHFree
ExtractIconA
SHGetFileInfoA
DragQueryFileA
ShellMessageBoxA
DragQueryPoint
SHGetDataFromIDListA
DuplicateIcon

nddeapi

NDdeShareAddA
NDdeShareGetInfoA

kernel32

VirtualProtectEx
WriteConsoleA
HeapAlloc
ReadFile
GetConsoleTitleW
CloseHandle
GetTimeFormatA
WaitForSingleObjectEx
GetCommandLineA
UpdateResourceW
LoadLibraryExW
CreateDirectoryA
GetModuleHandleA
GetLogicalDriveStringsA
lstrcmpiA

user32

GetDlgItemTextA
DispatchMessageA
DialogBoxParamA
DrawStateA
GetMessageA
LoadIconA
PostMessageA
IsDialogMessageA
CreateDesktopW
FlashWindow
GetPropA
GetClassLongA
LoadCursorA
CharToOemA
wsprintfA

crypt32

CertOpenStore
CertCompareCertificate
CertFindCRLInStore
CertGetNameStringA
CertControlStore
CertAlgIdToOID
CertAddStoreToCollection
CertSaveStore
CryptFindOIDInfo
CertFindAttribute
CertDuplicateStore
CertDuplicateCRLContext
CertFindExtension
CertCreateContext
CertCloseStore
CertCreateCRLContext
CryptEnumOIDInfo

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c55dce0e772427ca143e7d9361b6621

Headers

DLL Characteristics

File Characteristics

Imports

shell32

nddeapi

kernel32

user32

crypt32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 41KB - Virtual size: 40KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 41KB - Virtual size: 40KB