df9e8514e2335139a60ec2b4d6e7f44b80d8de759b093a20885f9dd6555f4891

Sharing

Copy URL

Twitter E-mail

General

Target

df9e8514e2335139a60ec2b4d6e7f44b80d8de759b093a20885f9dd6555f4891
Size

147KB
MD5

0d9e5df0dcf542a8be441ccbf912c291
SHA1

68d3054d7e76dccecb204ec89f3e26597b0d3e80
SHA256

df9e8514e2335139a60ec2b4d6e7f44b80d8de759b093a20885f9dd6555f4891
SHA512

2ccc83ebf4f4da9afd45a2871d19006de5b20367fc7459e4931f2bd8ef36e918712760ff8b9e439f68cc3a8e11c2e79b6cd20bb23a239dd5d415e8e1b5dfa7a8
SSDEEP

3072:9oOJeUrILIo1GRAB7Kyy3mYbj4z2Z+op+Lnyt5WjNRK97:LJA8GKBmyqsweHWZU9

Score

N/A

Malware Config

Signatures

Files

df9e8514e2335139a60ec2b4d6e7f44b80d8de759b093a20885f9dd6555f4891
.exe windows x86

ee4ac3683005b393a450b0c789901d4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

InterlockedExchange
VirtualProtect
FileTimeToLocalFileTime
GetVersionExW
SetLastError
GetModuleHandleA
IsBadCodePtr
WriteConsoleA
GetStartupInfoA
GetSystemTime

user32

MapWindowPoints
EnumWindows
RedrawWindow
DrawMenuBar
PostQuitMessage
DrawIconEx
GetSysColor
IsZoomed
KillTimer
IsIconic
CreateWindowExA
SetRect
CallWindowProcA

msvcrt

log10
__p__fmode
_purecall
_kbhit
_acmdln
fputs
_except_handler3
__setusermatherr
_adjust_fdiv
rand
wcsrchr
__set_app_type
__p__commode
wcsncpy
__getmainargs
exit
_snprintf
_getcwd
puts
_initterm
_XcptFilter
pow

oleaut32

CreateErrorInfo
SafeArrayGetUBound
SysStringLen
SafeArrayPtrOfIndex
SafeArrayGetElement
LoadTypeLib

shell32

SHAppBarMessage
SHBrowseForFolder
DragQueryFileW
SHGetSettings
SHBrowseForFolderW
SHChangeNotify
SHGetMalloc
ExtractIconA
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetDesktopFolder
SHGetPathFromIDListW

ole32

IsEqualGUID
CoInitializeSecurity
CoInitializeEx
RevokeDragDrop
OleSetMenuDescriptor
CoUninitialize
CreateILockBytesOnHGlobal

comctl32

ImageList_DragShowNolock
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Replace
PropertySheetA
ImageList_EndDrag
PropertySheetW
ImageList_Add

advapi32

OpenThreadToken
SetSecurityDescriptorDacl
InitiateSystemShutdownA
RegEnumValueA
SetSecurityDescriptorGroup
CryptAcquireContextA
OpenSCManagerW
ControlService
AllocateAndInitializeSid
RegQueryValueA
LookupPrivilegeValueA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ee4ac3683005b393a450b0c789901d4a

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

oleaut32

shell32

ole32

comctl32

advapi32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 135KB - Virtual size: 135KB

.data Size: 6KB - Virtual size: 5KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 135KB - Virtual size: 135KB

.data
Size: 6KB - Virtual size: 5KB