5ad17488966878709d116dd3964a0e410457ee3aabc5125e251d555982ee520c

General

Target

5ad17488966878709d116dd3964a0e410457ee3aabc5125e251d555982ee520c
Size

287KB
MD5

587cfc1a6ddb05eacfa364123b9cf854
SHA1

23666821e82c643559e52773ce7b6e21004a161d
SHA256

5ad17488966878709d116dd3964a0e410457ee3aabc5125e251d555982ee520c
SHA512

de501d08764ff0319fd1aea8a9af27ce891dd886eb76532b94b236566257f97eaea4d44d45c59288dd6cd67463f7c81c2df5c846636b3a306a3c17ded5557bbf
SSDEEP

6144:0OBiPrfNG08ItCbVRH78v4/9Z2D9ZXsrCAGhIjAkPXNR:SPrFt68bachrk/P

Score

N/A

Malware Config

Signatures

Files

5ad17488966878709d116dd3964a0e410457ee3aabc5125e251d555982ee520c
.exe windows x86

fbf258b61042e2e1c2db9008befed006

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

StrRetToStrA
PathIsFileSpecA
PathAppendA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathCreateFromUrlW

kernel32

lstrlenA
GetCurrentProcess
InterlockedDecrement
GlobalFree
GetModuleFileNameW
FindAtomW
Sleep
SetLastError
CreateFileW
CreateThread
GetLocaleInfoW
InterlockedExchange
GlobalHandle
FlushInstructionCache
FormatMessageW
GetProcessId
EnterCriticalSection
InitializeCriticalSection
lstrlenW
GetTickCount
EnumResourceLanguagesW
LeaveCriticalSection
HeapSetInformation
GlobalAlloc
CloseHandle
ProcessIdToSessionId
MultiByteToWideChar
lstrcmpW
LocalAlloc
DeleteCriticalSection
GlobalLock
GetStringTypeW
OpenProcess
WaitForMultipleObjects
RaiseException
GlobalUnlock
MulDiv
GetSystemDirectoryW
WaitForSingleObject
InterlockedIncrement
GetComputerNameW
WideCharToMultiByte

oleacc

CreateStdAccessibleObject

Sections

.text
Size: 148KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbf258b61042e2e1c2db9008befed006

Headers

File Characteristics

Imports

shell32

shlwapi

kernel32

oleacc

Sections

.text Size: 148KB - Virtual size: 276KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 134KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 148KB - Virtual size: 276KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 134KB

.rsrc
Size: 512B - Virtual size: 4KB