1d916942656f14aa5c8d05f086a3e66ec81fd99d4fec9f5173e5870f7e6181d0

Sharing

Copy URL Twitter E-mail

General

Target

1d916942656f14aa5c8d05f086a3e66ec81fd99d4fec9f5173e5870f7e6181d0
Size

102KB
MD5

114735aab240895a528a998c04d385bc
SHA1

50553f09545861aba8ce5222162645ad39404641
SHA256

1d916942656f14aa5c8d05f086a3e66ec81fd99d4fec9f5173e5870f7e6181d0
SHA512

c0fe093853f117240ec1e14fbfcab25b3ca62e4213b543df0b5d37582b256602e520eb51e98b9583c075c5d2f5661c6c398a276c9199c79c633645b86315baa3
SSDEEP

1536:qlKdTiucKXYS58kT/kbo4tyZ6lW08M3Wx3RK8E4bQolN:IunH8kT/kbouyglW0VWPh3lN

Score

N/A

Malware Config

Signatures

Files

1d916942656f14aa5c8d05f086a3e66ec81fd99d4fec9f5173e5870f7e6181d0
.exe windows x86

c46c6a7f4726fc1e46d744dc40103678

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

glu32

gluQuadricNormals
gluProject
gluTessEndPolygon
gluEndCurve
gluPickMatrix
gluBuild1DMipmaps
gluNewQuadric
gluSphere
gluOrtho2D
gluNewNurbsRenderer
gluTessProperty
gluTessEndContour
gluScaleImage

comctl32

PropertySheetW
ord14
FlatSB_GetScrollRange
_TrackMouseEvent
ord6
ord15
FlatSB_GetScrollInfo
FlatSB_SetScrollRange
FlatSB_EnableScrollBar
UninitializeFlatSB
DestroyPropertySheetPage
CreateStatusWindowW
FlatSB_GetScrollPos

advapi32

ReadEventLogW
RegLoadKeyA
OpenProcessToken
RegUnLoadKeyA
AdjustTokenGroups
RegEnumKeyA
OpenBackupEventLogA
AccessCheck
OpenEventLogA
ReadEventLogA
RegCreateKeyExA
RegEnumKeyExA
RegQueryMultipleValuesA

shlwapi

PathGetArgsW
PathIsRelativeA
ChrCmpIA
SHEnumKeyExA
SHRegGetBoolUSValueW
SHRegEnumUSValueA
PathRemoveBlanksW
SHRegQueryUSValueW
PathUnquoteSpacesA

kernel32

VerLanguageNameA
GetProfileStringA
GetPrivateProfileStructA
GetModuleHandleA
GetProcAddress
VirtualAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
SetFilePointer
InitializeCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
InterlockedDecrement
InterlockedIncrement
SetStdHandle
CloseHandle
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW

version

VerFindFileA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
VerInstallFileA

uxtheme

GetThemeMetric
SetThemeAppProperties
GetThemeFont
GetThemeBool
IsThemeActive
IsThemePartDefined
DrawThemeText
GetThemeSysColorBrush
GetThemePartSize
GetWindowTheme
GetCurrentThemeName
DrawThemeEdge
GetThemeSysSize
GetThemeSysInt
GetThemePosition

usp10

ScriptStringValidate
ScriptStringFree
ScriptFreeCache
ScriptLayout
ScriptCacheGetHeight
ScriptBreak
ScriptGetFontProperties
ScriptJustify
ScriptString_pcOutChars
ScriptStringAnalyse
ScriptShape
ScriptTextOut
ScriptItemize
ScriptXtoCP
ScriptString_pSize

aclui

ord1
ord2

gpedit

ExportRSoPData

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c46c6a7f4726fc1e46d744dc40103678

Headers

File Characteristics

Imports

glu32

comctl32

advapi32

shlwapi

kernel32

version

uxtheme

usp10

aclui

gpedit

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 13KB - Virtual size: 23KB

.rsrc Size: 41KB - Virtual size: 41KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 13KB - Virtual size: 23KB

.rsrc
Size: 41KB - Virtual size: 41KB