d1a47795378bce8e05301544c3350836aa8aac80e61ff8c0df3c355fe4c518cd

Sharing

Copy URL Twitter E-mail

General

Target

d1a47795378bce8e05301544c3350836aa8aac80e61ff8c0df3c355fe4c518cd
Size

216KB
MD5

20ae41e011da1d4f103081046b7add9a
SHA1

b922657a543359a678cdd2dfc8c8e04f3a1dac69
SHA256

d1a47795378bce8e05301544c3350836aa8aac80e61ff8c0df3c355fe4c518cd
SHA512

fb07073d721e3160cfdfb5479029371715ae398e7a8943af32ce6ec9acf9fee7380b0f6686546c046941e2daf9a409ece7b10bb0f2745ea68947ece077b0dc8c
SSDEEP

3072:piUo+FNwOgKBSsh6EfcRlhuKUvObmbYT6dEiHMLpV2jJ3CKVjwxH5UtfDR51U29:BougKY86EfcRHuKOObkqnisdNfSfF

Score

N/A

Malware Config

Signatures

Files

d1a47795378bce8e05301544c3350836aa8aac80e61ff8c0df3c355fe4c518cd
.exe windows x86

b631d3a8c6ab51a0e5bf0eaf9932f3a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcpyA
GetStringTypeExA
GetFileTime
GetDateFormatA
IsDebuggerPresent
GetStartupInfoA
GetModuleFileNameW
GetNumberFormatA
GlobalUnlock
lstrcmpiA
GetLocalTime
CreateProcessW
GetConsoleMode
GetStartupInfoW
LocalFileTimeToFileTime
GetConsoleOutputCP
VirtualProtectEx

user32

IsZoomed
SetScrollInfo
GetMessagePos
SetCapture
InflateRect
GetSystemMenu
SetDlgItemTextA
GetSysColor

msvcrt

_cexit
__getmainargs
_except_handler3
_adjust_fdiv
calloc
realloc
__set_app_type
malloc
atexit
atoi
strlen
_initterm
__setusermatherr
sqrt
__p__fmode
fputs
fread
strstr
_acmdln
_write
_snprintf
_vsnprintf
_strnicmp
__dllonexit
_exit
__p__commode
free

comdlg32

GetOpenFileNameA

ole32

CreateStreamOnHGlobal
OleFlushClipboard
OleSetMenuDescriptor
CoFreeUnusedLibraries
CLSIDFromString
ProgIDFromCLSID
OleSetClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
OleInitialize

advapi32

RegCreateKeyA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegCreateKeyExW
SetSecurityDescriptorDacl
RegCloseKey
OpenSCManagerA
CopySid
RegQueryInfoKeyW
OpenServiceA
RegQueryValueExA
CheckTokenMembership
RegEnumKeyExW
DeregisterEventSource
CryptHashData
QueryServiceStatus
AddAccessAllowedAce

comctl32

ImageList_GetIcon
ImageList_GetIconSize
ImageList_DragLeave
CreatePropertySheetPageW
ImageList_Write
ImageList_Draw
ImageList_LoadImageW
PropertySheetW
ImageList_Destroy

gdi32

SetWorldTransform
GetTextExtentPoint32A
IntersectClipRect
CreateHatchBrush
SetTextAlign
Pie
RectInRegion
SetRectRgn
SetViewportOrgEx
GetTextMetricsA
Polyline
ExtFloodFill
SetPixel

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b631d3a8c6ab51a0e5bf0eaf9932f3a0

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

comdlg32

ole32

advapi32

comctl32

gdi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 54KB - Virtual size: 195KB

.rsrc Size: 154KB - Virtual size: 153KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 54KB - Virtual size: 195KB

.rsrc
Size: 154KB - Virtual size: 153KB