0a1b7d9958e7419f92db527d957998597d6abc8d13cfb83c8be6428ba3c418a5

Sharing

Copy URL Twitter E-mail

General

Target

0a1b7d9958e7419f92db527d957998597d6abc8d13cfb83c8be6428ba3c418a5
Size

257KB
MD5

0fe0969fbe95e0ef91ce50b3912a5358
SHA1

dbc0f85655ba1caf232bd68a629a0c691fbb2274
SHA256

0a1b7d9958e7419f92db527d957998597d6abc8d13cfb83c8be6428ba3c418a5
SHA512

a31e765f3f4d05b8d1a6f567f794f0f5e54a49ef5d970cdb839445cee37cb496e05a96cb934ad26d8f3b9784cccb09237357f985e3f65c5e4d19290f42d4ea08
SSDEEP

6144:ZwAuNorx8FGq99QkbJFsNfoSE4xUEPq6U6:Wl2FKKkdFvGxUmqV6

Score

N/A

Malware Config

Signatures

Files

0a1b7d9958e7419f92db527d957998597d6abc8d13cfb83c8be6428ba3c418a5
.exe windows x86

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu
RegisterClassA
CreateMenu
GetWindowDC
RedrawWindow

comctl32

ImageList_Draw
ImageList_DrawEx
ImageList_Write
ImageList_Create

oleaut32

SysReAllocStringLen
VariantChangeType
SysStringLen
SafeArrayGetElement
GetErrorInfo
SysFreeString

kernel32

GetCurrentProcessId
GetFullPathNameA
WriteFile
ExitProcess
RaiseException
GetStdHandle
lstrlenW
EnterCriticalSection
SetHandleCount
GetCurrentProcess
WideCharToMultiByte
LocalAlloc
GetCommandLineW
VirtualAllocEx
GetModuleHandleW
GetUserDefaultLCID
GetTickCount
GetVersion
LoadLibraryA
GetProcessHeap
GetDiskFreeSpaceA
GetSystemDefaultLangID
SetThreadLocale
GetCPInfo
GlobalAlloc
DeleteCriticalSection
WaitForSingleObject
GetThreadLocale
FreeLibrary
LocalReAlloc
GetLastError
GlobalAddAtomA
GetEnvironmentStrings
SizeofResource
GetTempPathA
HeapDestroy
VirtualAlloc
Sleep
DeleteFileA
GetVersionExA
InitializeCriticalSection
GetStartupInfoA
SetEndOfFile
LockResource
IsBadReadPtr
ResetEvent
GetLocalTime
SetErrorMode
HeapAlloc
lstrcmpiA
CreateThread
lstrcmpA
FormatMessageA
GetCurrentThread

Exports

Exports

_XBMLmudpqA2@4
W0_j5Ku@4
_qLtBeS@24
AV3ATS9B@4
G2Jlvhsh@8
_jlc2N@24
0RO_Jv@16
TjADImoU6WlmFj
39cgMwcoMY
_SJevSry
_if4x1l_v
IlCpp1uc
_Ua__x
xy0Yvm8mjqyCx
_1jrwZ
2MrapH
jhkRv
_ElWOaRNkWR@4
_606MEPMK@4
_8SDvr3I7b1g
lAdjH
_A5uAie2Ntb@8
_Cs_0Q6vqxMWh
_Frz9DhEFZruc
s4stEm3GlBC
_XpYdV@8
_VVUoNe8xjT@24
KRSqGW7@4
_Zg_vm
H6DEkeeIQjw5@12
_T33IVWjbB6gX
_H2I0tGiQMTRDSN@12
xKl1SCjNe
_4ZTcby_m9vy
aAs4X
_pXqJX8CkulMx@12
_LA9OPlQLHk6@24
9FLkv9Sgyq4c@12
_2DXCm_
_NR8jZWhIGva
_7RgEDOQ
yIAdu
cRYXqwCXZ49
YyNYUkv_VYE7E
g_gdph
_wGnTo2HCmu@12
_yhRAsr
_T5GiBtx5EOx
_9MIT7b_7S0@20
rGwzc4z7lwB
gXQyjJ_2siF
_1AeLPQWXC4N@8
_wdnwysG_FBqx@8
MlwhCyUY
zTydbQF@16
_ywHsg6ns1e
_MOMqxPcpG_weOt
_Qa1rXl@24
_bNisN0_iWnU2O@12
_6uSFZT
_BUVNGxu79LJT@8
X_eX3d0
svqDI@8
_miTmzjoQ3iRJF
EYdXCVX7@16

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iudata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

Imports

user32

comctl32

oleaut32

kernel32

Exports

Exports

Sections

CODE Size: 32KB - Virtual size: 32KB

DATA Size: 11KB - Virtual size: 798KB

.iudata Size: 207KB - Virtual size: 207KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 32KB - Virtual size: 32KB

DATA
Size: 11KB - Virtual size: 798KB

.iudata
Size: 207KB - Virtual size: 207KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB