4fa14f5f453500f9840f32c1aad8acc02fe517678a9a19ce5c892dbb9eb1eee6

Sharing

Copy URL Twitter E-mail

General

Target

4fa14f5f453500f9840f32c1aad8acc02fe517678a9a19ce5c892dbb9eb1eee6
Size

109KB
MD5

09eed31c62db79549e04359bb1536251
SHA1

f4bbd2c3d156b8f146989b1e903beb5940622796
SHA256

4fa14f5f453500f9840f32c1aad8acc02fe517678a9a19ce5c892dbb9eb1eee6
SHA512

5dba586246cc83e4980e4034b2528ba9d3122cc3344d0cb890a06c715e63dd24564987628514713b2fb93674ae3eeda1220df9d19e93efc706d5ae6a8e809c2b
SSDEEP

1536:dWEhGsWPJdLeBbA2a9Dpbm9kmySxhVYWG/Tex94Icx3/58uO5E8p3:IEhroL2boVboZdxwWrx9038P5X

Score

N/A

Malware Config

Signatures

Files

4fa14f5f453500f9840f32c1aad8acc02fe517678a9a19ce5c892dbb9eb1eee6
.exe windows x86

9969dfbb52ffd80990e172c98ad62f71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

SetWindowTextA
GetScrollPos
EnableMenuItem
FrameRect
GetSubMenu
EnumWindows
SetWindowPos
UnhookWindowsHookEx
GetSysColorBrush
PostQuitMessage
EqualRect
GetSysColor
GetMessageA

kernel32

GetACP
RtlUnwind
FileTimeToSystemTime
InterlockedExchange
GetFileAttributesA
VirtualAllocEx
GetCurrentProcessId
GetSystemTime
ExitProcess
GetThreadLocale
GetStartupInfoA
GetTempPathA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetOEMCP
GetTimeZoneInformation

gdi32

FillRgn
SetViewportExtEx
ExcludeClipRect
DPtoLP
SelectClipPath
GetMapMode
CopyEnhMetaFileA
CreateCompatibleBitmap
CreateICW

ole32

CoInitialize
DoDragDrop
StringFromGUID2
CoTaskMemRealloc
CoInitializeSecurity
CoRevokeClassObject
CoCreateInstance
StgOpenStorage
OleRun

advapi32

AdjustTokenPrivileges
RegCreateKeyExW
GetUserNameA
QueryServiceStatus
RegQueryValueExW
GetSecurityDescriptorDacl
RegCreateKeyA
CryptHashData
FreeSid
CheckTokenMembership

msvcrt

_CIpow
fflush
signal
__getmainargs
puts
fprintf
__setusermatherr
strcspn
_mbscmp
_fdopen
_strdup
strlen
raise
__initenv
_lock
iswspace
_flsbuf
strncpy

comctl32

InitCommonControls
CreatePropertySheetPageA
ImageList_GetBkColor
ImageList_GetIcon
ImageList_SetIconSize
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_Write
ImageList_LoadImageW
ImageList_Destroy
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_DrawEx

shell32

SHGetPathFromIDList
DoEnvironmentSubstW
ShellExecuteW
SHBrowseForFolderA
ExtractIconExW
ExtractIconW
CommandLineToArgvW
ShellExecuteEx
DragQueryFileW
DragAcceptFiles
DragQueryFileA

oleaut32

VariantCopy
SafeArrayPtrOfIndex
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayUnaccessData
SafeArrayRedim
SafeArrayCreate
SafeArrayPutElement

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uejvkco
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9969dfbb52ffd80990e172c98ad62f71

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 34KB - Virtual size: 34KB

.data Size: 39KB - Virtual size: 39KB

.rsrc Size: 34KB - Virtual size: 62KB

uejvkco Size: - Virtual size: 4KB

.text
Size: 34KB - Virtual size: 34KB

.data
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 34KB - Virtual size: 62KB

uejvkco
Size: - Virtual size: 4KB