a01d5cd3380506e7ac334b3cffe6d2745f9a963f81127d1cda5d8d17c4a20a3a

Sharing

Copy URL Twitter E-mail

General

Target

a01d5cd3380506e7ac334b3cffe6d2745f9a963f81127d1cda5d8d17c4a20a3a
Size

90KB
MD5

0e20280f857a18fdabc3d2f262bf7146
SHA1

aa90cddea7d243a3c8cc4bdf5e598ca4cd1d1b48
SHA256

a01d5cd3380506e7ac334b3cffe6d2745f9a963f81127d1cda5d8d17c4a20a3a
SHA512

06ef154ab76aee2e7acf9b2dd92b73c28dbdafab6c77cb656abb8c6264cc1db76dc13d6492a1e96fb548545cd4876ef4071540dad86e128d97f4a5ec922bc1a0
SSDEEP

1536:vCQNiYILUWb+f0UlvtVmas5QPVhdaWPr5qribOmQxWvhhfiBpdrlR67fBnKSILF:6hLUO+f0UlFVQyhkuqrMhJ6N4a

Score

N/A

Malware Config

Signatures

Files

a01d5cd3380506e7ac334b3cffe6d2745f9a963f81127d1cda5d8d17c4a20a3a
.exe windows x86

30f537a80883a64f41a30a8bc431e54e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetSysColor
UnhookWindowsHookEx
GetSubMenu
FrameRect
EnumWindows
GetSysColorBrush
PostQuitMessage
EnableMenuItem
EqualRect
SetWindowPos
GetMessageA
GetScrollPos
SetWindowTextA

kernel32

GetCurrentProcessId
FileTimeToSystemTime
GetTickCount
GetFileAttributesA
GetACP
InterlockedExchange
GetThreadLocale
VirtualAllocEx
GetStartupInfoA
ExitProcess
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetOEMCP
RtlUnwind
GetTempPathA
GetSystemTime

gdi32

ExcludeClipRect
GetMapMode
CreateCompatibleBitmap
SelectClipPath
DPtoLP
CopyEnhMetaFileA
CreateICW
SetViewportExtEx
FillRgn

ole32

CoRevokeClassObject
CoInitializeSecurity
StringFromGUID2
CoCreateInstance
DoDragDrop
OleRun
CoTaskMemRealloc
CoInitialize
StgOpenStorage

advapi32

CryptHashData
RegQueryValueExW
RegCreateKeyExW
GetUserNameA
GetSecurityDescriptorDacl
AdjustTokenPrivileges
CheckTokenMembership
RegCreateKeyA
QueryServiceStatus
FreeSid

msvcrt

_mbscmp
_flsbuf
strncpy
__setusermatherr
raise
_strdup
puts
strcspn
__initenv
signal
_fdopen
_CIpow
fflush
__getmainargs
fprintf
strlen
_lock
iswspace

comctl32

ImageList_Destroy
ImageList_Write
ImageList_DragEnter
ImageList_GetBkColor
ImageList_ReplaceIcon
CreatePropertySheetPageA
ImageList_SetIconSize
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_LoadImageW
InitCommonControls
ImageList_DrawEx
ImageList_GetIcon

shell32

ShellExecuteEx
CommandLineToArgvW
DragAcceptFiles
ShellExecuteW
SHGetPathFromIDList
ExtractIconW
DragQueryFileA
DoEnvironmentSubstW
ExtractIconExW
SHBrowseForFolderA
DragQueryFileW

oleaut32

SafeArrayPutElement
VariantCopy
SafeArrayCreate
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayRedim

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rjrcaib
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

30f537a80883a64f41a30a8bc431e54e

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 38KB - Virtual size: 38KB

.data Size: 45KB - Virtual size: 44KB

.rsrc Size: 6KB - Virtual size: 34KB

rjrcaib Size: - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 45KB - Virtual size: 44KB

.rsrc
Size: 6KB - Virtual size: 34KB

rjrcaib
Size: - Virtual size: 4KB