4e727ffc5d4f216a4e29468754e227231f60ea52420d3a028b1475dd6393de65

Sharing

Copy URL Twitter E-mail

General

Target

4e727ffc5d4f216a4e29468754e227231f60ea52420d3a028b1475dd6393de65
Size

568KB
MD5

0bff54714ee34d3f462d6e0e1b65ac20
SHA1

aa62035e8f2ecfe30010dfde902184b5539b323e
SHA256

4e727ffc5d4f216a4e29468754e227231f60ea52420d3a028b1475dd6393de65
SHA512

f8d5306eddc70225c03754c86adc67aa9913401d18cac4f9d870c59546f14f59fe8356157abe55ef7651fd726ca87eb648487c05de6cdb700d7544df747298ad
SSDEEP

12288:QGkZQroc4oFjltGj7HDB6bsOj5SkeqhW5cub:QGk8hh5ls/HF6bsESuh6c

Score

N/A

Malware Config

Signatures

Files

4e727ffc5d4f216a4e29468754e227231f60ea52420d3a028b1475dd6393de65
.exe windows x86

6d074cf2f54b90270c149be1a8509e2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

gdi32

AddFontMemResourceEx
OffsetWindowOrgEx
LPtoDP
GetObjectType
CreateEnhMetaFileA
GetPixelFormat
CreateDIBPatternBrush
SetBrushOrgEx
GetCurrentObject
FrameRgn
GetGlyphIndicesW
CombineRgn
SetDCPenColor
CreateRectRgnIndirect
GetTextCharacterExtra
CloseMetaFile
GetRgnBox

ole32

OleUninitialize
OleCreate
CoGetCallContext
CoFreeLibrary
StringFromGUID2
HBITMAP_UserMarshal
HACCEL_UserFree
CoUnmarshalHresult

shlwapi

PathCombineA
SHRegEnumUSValueA
PathRemoveFileSpecA
SHStrDupA
SHQueryInfoKeyA
PathRemoveBackslashA
SHDeleteValueA
StrRetToBufW
StrFormatKBSizeW
PathUnquoteSpacesA

oleaut32

VarBstrFromI2
VarUI1FromI1
VarR4FromBool
SafeArrayDestroy
SafeArrayCreateVector
VarI1FromDisp
VarBstrFromDec
SafeArrayAllocDescriptor

shell32

DragQueryFileA
Shell_NotifyIconW
SHIsFileAvailableOffline
SHFileOperationA
SHInvokePrinterCommandW
DragAcceptFiles
SHQueryRecycleBinW
ord179
ExtractAssociatedIconExA
SHInvokePrinterCommandA

setupapi

SetupIterateCabinetA
SetupDiCreateDeviceInterfaceA
SetupAddToDiskSpaceListA
SetupInstallFilesFromInfSectionA
SetupQueueDefaultCopyW
SetupDiCreateDevRegKeyW
SetupQueueRenameSectionW
SetupDiSetClassInstallParamsA
SetupFindNextLine

kernel32

FreeConsole
GetCurrentProcessId
lstrcmpiW
AddAtomA
VirtualFree
VirtualAlloc
CreateThread

Exports

Exports

AdjustGo
AssociatePasswordAccessOf
ClusterKBMove
ExpandProfile
FaultStg
InDraw
PatProcessCache
PolyLocalConnect
RaiseJunctionFeature
ResumeImpersonateIDExPage
SHDeleteValueButtonSiteIdentifiers
SHEnumSizeTableText
SHSkipQueue
SuspendObjectsComposite

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d074cf2f54b90270c149be1a8509e2a

Headers

File Characteristics

Imports

gdi32

ole32

shlwapi

oleaut32

shell32

setupapi

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 139KB - Virtual size: 139KB

.data Size: 371KB - Virtual size: 371KB

.CRT Size: 1024B - Virtual size: 1024B

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 139KB - Virtual size: 139KB

.data
Size: 371KB - Virtual size: 371KB

.CRT
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 31KB - Virtual size: 30KB