990b12d52343685e03f6173277d356ffca0754cb5abfdf50705bc9e20cd92eaa

Sharing

Copy URL

Twitter E-mail

General

Target

990b12d52343685e03f6173277d356ffca0754cb5abfdf50705bc9e20cd92eaa
Size

142KB
MD5

108d84ea81e3eef70a68e88e6413e747
SHA1

e34e53716657310d194e43b65611d1df14a0d4b3
SHA256

990b12d52343685e03f6173277d356ffca0754cb5abfdf50705bc9e20cd92eaa
SHA512

ec820d83144fa9554db25386d9f045053152a9c5655a174dac91b592e98dc3338b8e9d8eb7181307cf045486b2ccd426641d3ec3198a64003489d4a06652b317
SSDEEP

1536:OwK1VHexJXZZLpZSBvVNO55UYwaFxBPoyEAM1mzPD1YhlbAxkIRmIsf8K3XNYEZw:hK1VHezLp0B7fWEAM1AD1o1AxtLKdxeX

Score

N/A

Malware Config

Signatures

Files

990b12d52343685e03f6173277d356ffca0754cb5abfdf50705bc9e20cd92eaa
.exe windows x86

ce9543e8592f2a02a24ec8d9d54b49d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetPrivateProfileStringA
GetCurrentProcess
GetConsoleMode
lstrcmpiA
SetErrorMode
GetModuleHandleA
VirtualProtect
GetStartupInfoA
FileTimeToSystemTime
GetLocaleInfoW
SetFilePointer
GetUserDefaultLCID
WaitForMultipleObjects
GetEnvironmentVariableA
MultiByteToWideChar

msvcrt

_initterm
_adjust_fdiv
__set_app_type
__getmainargs
_XcptFilter
__p__commode
exit
_acmdln
__p__fmode
__setusermatherr
clock
__badioinfo
qsort
_itoa
_errno
log
perror
_except_handler3
_wcslwr

user32

RegisterClipboardFormatA
UpdateWindow
PeekMessageA
GetDC
IsDialogMessageA
GetCursorPos
IsRectEmpty

advapi32

SetSecurityDescriptorOwner
RegEnumValueA
AllocateAndInitializeSid
LookupPrivilegeValueW
GetSecurityDescriptorDacl
LookupPrivilegeValueA
CryptCreateHash
RegCreateKeyA
OpenSCManagerA
OpenProcessToken
OpenServiceW
RegOpenKeyA

ole32

OleInitialize
StgOpenStorage
OleDraw
CLSIDFromProgID
CoGetMalloc
CreateItemMoniker
IsEqualGUID
CreateILockBytesOnHGlobal
CreateBindCtx

gdi32

StrokePath
EndPath
GetEnhMetaFileBits
GetCurrentPositionEx
GetDIBColorTable
GetSystemPaletteEntries
EndDoc
GetBitmapBits

comctl32

ImageList_DragShowNolock
ImageList_SetIconSize
ImageList_SetBkColor
ImageList_GetIcon
CreateToolbarEx

oleaut32

SafeArrayGetUBound
VariantInit
SysAllocStringByteLen
SafeArrayPutElement
GetErrorInfo
SysFreeString
SysStringByteLen
SafeArrayPtrOfIndex
SafeArrayRedim

version

GetFileVersionInfoSizeA
VerQueryValueA
VerLanguageNameA
VerInstallFileA
GetFileVersionInfoA
VerInstallFileW
VerQueryValueW
GetFileVersionInfoW

shell32

SHGetPathFromIDList
FindExecutableW
SHGetFolderPathA
ExtractAssociatedIconW
ShellExecuteW
SHAddToRecentDocs
SHGetSettings

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce9543e8592f2a02a24ec8d9d54b49d4

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

ole32

gdi32

comctl32

oleaut32

version

shell32

Sections

.text Size: 64KB - Virtual size: 63KB

.data Size: 48KB - Virtual size: 48KB

.rsrc Size: 28KB - Virtual size: 48KB

.text
Size: 64KB - Virtual size: 63KB

.data
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 28KB - Virtual size: 48KB