d9e8e73f245bfccef15c832d06294131fceb28ab4a0887965e6e797be1d840f2

Sharing

Copy URL Twitter E-mail

General

Target

d9e8e73f245bfccef15c832d06294131fceb28ab4a0887965e6e797be1d840f2
Size

336KB
MD5

0bd8d1ea8d721f444d4faaf23689cc9a
SHA1

8370889e7efcc4d6c10a83711a17b611a2db1a40
SHA256

d9e8e73f245bfccef15c832d06294131fceb28ab4a0887965e6e797be1d840f2
SHA512

c8b62fb6df833115270cf5b459d111fd6862c687a83d33fe9d6927ff4c94211f0f0b1990f4e027f5070bddba4ee9e6c5a597d27618fb787a5edc3bbdceaefbb2
SSDEEP

6144:ynVjpbw2gSnm4S6KS+tdi5sbg68xa4NqS28Ct31kQsaE2dmLMuS3AZ4+bgH8K:ynpJw2bP+qGb+auqu0rBMQe28

Score

N/A

Malware Config

Signatures

Files

d9e8e73f245bfccef15c832d06294131fceb28ab4a0887965e6e797be1d840f2
.exe windows x86

ae03e500d085fbbdd869a92f3563def9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
UnlockFileEx
SetConsoleActiveScreenBuffer
SetEvent
GetProfileIntW
GetTimeFormatW
FillConsoleOutputAttribute
GetLocalTime
WritePrivateProfileStructA
UnhandledExceptionFilter
GetPrivateProfileStringW
SetCommMask
GetDiskFreeSpaceA
FlushViewOfFile
GetCommTimeouts
FreeConsole
GetStringTypeW
InitializeCriticalSection
SetCurrentDirectoryA
SystemTimeToFileTime
HeapSize
GetCommandLineA
ExitProcess
GetVersionExA
lstrlenA
VirtualProtect
lstrlenW

user32

GetAsyncKeyState
LoadStringA
DrawTextExA
CharLowerBuffW
GetMenuItemRect
MsgWaitForMultipleObjects
GetDlgCtrlID
SwitchToThisWindow
DialogBoxParamA
TrackMouseEvent
InsertMenuItemW
ChangeDisplaySettingsW
RegisterDeviceNotificationA
DrawMenuBar
GetMenuItemInfoW

gdi32

GetBkMode
GetEnhMetaFilePaletteEntries

comdlg32

GetSaveFileNameA
PageSetupDlgW

advapi32

AbortSystemShutdownA
SetTokenInformation
NotifyBootConfigStatus
AddAce
RegDeleteKeyA
IsValidAcl
RegisterServiceCtrlHandlerA
GetTokenInformation
GetSecurityInfo
RegSaveKeyA
AllocateAndInitializeSid
RegSaveKeyW
RegCreateKeyW
CryptSetProvParam
EnumDependentServicesA
SetNamedSecurityInfoA
SetEntriesInAclA
RegisterEventSourceW
QueryServiceObjectSecurity
StartServiceCtrlDispatcherA
SetKernelObjectSecurity
CryptGenKey
CreateProcessAsUserA

shell32

ExtractIconW
FindExecutableW
ShellExecuteExA
SHBrowseForFolderA
SHGetSpecialFolderPathW

ole32

StgOpenStorageEx
GetRunningObjectTable
OleRegGetUserType
OleSetContainedObject
CoTaskMemFree

oleaut32

SafeArrayGetElement
SysReAllocStringLen
VariantInit
SafeArrayRedim
CreateErrorInfo
SysStringLen
VariantCopy
DispGetIDsOfNames
LoadTypeLi
SafeArrayPutElement

comctl32

ImageList_SetOverlayImage
ImageList_EndDrag
ImageList_Add
InitCommonControlsEx

shlwapi

StrToIntExW
PathCompactPathW
SHRegSetUSValueW
PathGetCharTypeW

setupapi

SetupGetStringFieldW
SetupOpenAppendInfFileA

Sections

.text
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ae03e500d085fbbdd869a92f3563def9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

setupapi

Sections

.text Size: 300KB - Virtual size: 297KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 28KB - Virtual size: 27KB

.text
Size: 300KB - Virtual size: 297KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 28KB - Virtual size: 27KB