259ed9b5da05962dec7c8a93db64cfa6adda74528182c8b2c4362865f0050982

Sharing

Copy URL Twitter E-mail

General

Target

259ed9b5da05962dec7c8a93db64cfa6adda74528182c8b2c4362865f0050982
Size

952KB
MD5

319fc1f1cf4eb2ae1f3ae32339341d60
SHA1

b529d297933810b78214a68edfda2097f7480c67
SHA256

259ed9b5da05962dec7c8a93db64cfa6adda74528182c8b2c4362865f0050982
SHA512

cf61ed0f4fbb8b330524de4967599873377d11fb5765c9c0534c0bb896d44ce38c4b497e8606cbf70ede01b2b546197a237a69746d19da7e326b9d16a29a0740
SSDEEP

12288:uhcdAqbfosyJMSMRSR++gepIwQ3F0lG6Ynl3TVdecPALc9ZSPDLfJIG33v/25mla:u/0fd2MoR+8l61dHPTPqDFn4mT

Score

N/A

Malware Config

Signatures

Files

259ed9b5da05962dec7c8a93db64cfa6adda74528182c8b2c4362865f0050982
.exe windows x86

ae19291a5936385960cabbac5515bdb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegGetKeySecurity
RegOpenKeyA
RegReplaceKeyA
RegOpenKeyW
RegCreateKeyW
RegQueryValueW
RegLoadKeyA
RegEnumKeyExW
RegEnumKeyA
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumKeyW
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExW
RegLoadKeyA
RegEnumValueW
RegReplaceKeyW
RegQueryInfoKeyW
RegReplaceKeyA
RegEnumValueA
RegEnumKeyW
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueA
RegQueryInfoKeyA
RegQueryValueW
RegGetKeySecurity
RegOpenKeyW
RegLoadKeyW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW

user32

GetDlgItem
DrawIcon
CopyImage
EndDialog
DrawTextW
DialogBoxParamW
InsertMenuA
LoadMenuA
GetWindowTextA
DrawTextA
CopyIcon
AlignRects
AppendMenuA
GetCursor
AppendMenuW
CreateIcon
DialogBoxParamA

gdi32

CopyMetaFileA
GetClipBox
ClearBitmapAttributes
SetTextColor
GetBitmapBits
ClearBrushAttributes
CloseMetaFile
CreateSolidBrush
BeginPath
GetDCOrgEx
AddFontResourceExA
CloseFigure
DeleteDC
RestoreDC
ExtTextOutA
CreateSolidBrush
AddFontResourceA
ExcludeClipRect
ClearBrushAttributes
GetPixel
ClearBitmapAttributes
ExtTextOutA
GetPixel
CancelDC
BitBlt

comctl32

ImageList_Destroy
ImageList_GetIcon
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_Read
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Remove
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_Copy
ImageList_Create
ImageList_EndDrag
ImageList_LoadImageA
ImageList_DragLeave
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_GetImageCount

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 908KB - Virtual size: 907KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae19291a5936385960cabbac5515bdb1

Headers

File Characteristics

Imports

advapi32

user32

gdi32

comctl32

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 908KB - Virtual size: 907KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 8KB - Virtual size: 7KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1.7MB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 908KB - Virtual size: 907KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 8KB - Virtual size: 7KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1.7MB