1efd218ddd3cedfff3334240412cd3f1d08b88c35716e21de2ddd438627c229a

Sharing

Copy URL Twitter E-mail

General

Target

1efd218ddd3cedfff3334240412cd3f1d08b88c35716e21de2ddd438627c229a
Size

108KB
MD5

11fed86f19a9b510f083616e7a38c561
SHA1

8dde252524bb8293c5dac445c5f9eda726cd1892
SHA256

1efd218ddd3cedfff3334240412cd3f1d08b88c35716e21de2ddd438627c229a
SHA512

f7c54e41974f7180d634637f6053709b880210f46db3ef5b13d9e3e1e140ce232340f60a19533b550970930197cb62faf5669f69c064e2cd01a36695cbbfa998
SSDEEP

1536:CObbEqv9VikoOLO/UfsNxOeBilo/t71/VOwqV4L5cnjdqDy6bEW9QSQR3AddRzyP:LEqRi/UfOoeBfV7J1qVi0dqWzSQRew

Score

N/A

Malware Config

Signatures

Files

1efd218ddd3cedfff3334240412cd3f1d08b88c35716e21de2ddd438627c229a
.exe windows x86

ac331c5fbd9bb7928e46c4aa94daeced

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
malloc
_acmdln
fwrite
fread
fopen
__set_app_type
__p__environ
_XcptFilter
__p__fmode
_iob
strlen
__p__commode
fclose
__getmainargs
signal
_exit
_onexit
strrchr
strcpy
strcmp
fseek
_adjust_fdiv
__dllonexit
_initterm
_except_handler3
memmove
printf
free
strncpy
strncmp
exit
_errno
__setusermatherr
remove

kernel32

CreateDirectoryA
CompareStringA
GetSystemDirectoryA
LoadLibraryA
SetFileAttributesW
GetModuleHandleW
GetProcAddress
SetCurrentDirectoryA
LCMapStringA
GetExitCodeProcess
lstrlenW
GetOEMCP

shell32

SHBrowseForFolderW
SHGetFileInfoA
SHFileOperationA
SHGetFolderLocation
DragAcceptFiles
Shell_NotifyIconA
SHCreateDirectoryExA
SHChangeNotify
CommandLineToArgvW
SHGetSpecialFolderLocation
DragQueryFileW

advapi32

RegCreateKeyExA
EqualSid
RegDeleteValueW
OpenProcessToken
SetSecurityDescriptorGroup
DeregisterEventSource
RegCloseKey
GetUserNameA
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyA
AdjustTokenPrivileges
RegCreateKeyExW

oleaut32

LoadTypeLib
SetErrorInfo
VariantClear
SysStringByteLen
SafeArrayGetUBound
GetErrorInfo
SafeArrayGetElement
SysAllocStringByteLen
SysAllocStringLen
CreateErrorInfo

comctl32

ImageList_GetImageInfo
PropertySheetW
CreatePropertySheetPageW
ImageList_AddMasked
ImageList_DragEnter
PropertySheetA
ImageList_LoadImageW
ImageList_Read
ImageList_SetDragCursorImage

gdi32

SetDIBits
TextOutW
GetTextMetricsA
EnumFontFamiliesExA
BitBlt
LineDDA
PlayEnhMetaFile
ScaleViewportExtEx

user32

ShowOwnedPopups
InsertMenuItemA
GetWindowLongA
WindowFromPoint
CharNextA
DeleteMenu
ShowWindow
IsChild
SystemParametersInfoA
GetScrollPos
ShowCursor
GetMenuStringA

ole32

CreateStreamOnHGlobal
CoGetInterfaceAndReleaseStream
CoGetMalloc
CoGetClassObject
StringFromCLSID

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac331c5fbd9bb7928e46c4aa94daeced

Headers

File Characteristics

Imports

msvcrt

kernel32

shell32

advapi32

oleaut32

comctl32

gdi32

user32

ole32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 42KB - Virtual size: 64KB

.rsrc Size: 59KB - Virtual size: 59KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 42KB - Virtual size: 64KB

.rsrc
Size: 59KB - Virtual size: 59KB