4c7797eea73fa88b55e5762d90d1f1429f580775413fe9b1e02dc30a8b4e99e3

Sharing

Copy URL Twitter E-mail

General

Target

4c7797eea73fa88b55e5762d90d1f1429f580775413fe9b1e02dc30a8b4e99e3
Size

685KB
MD5

0c52d61bf22e56d5ad316cf7a6ac4ef0
SHA1

d47bc86bd25cfb75a33855cdf33c673cca88e311
SHA256

4c7797eea73fa88b55e5762d90d1f1429f580775413fe9b1e02dc30a8b4e99e3
SHA512

d86be7b0bceb4c77a0679adcc085b5e5f063cbb2106a1d547dcd59cbeb35efe952f25cd8c774eb0d3679f9a859ae5a6f029b0e04dc856ec8e60ff213e0243e92
SSDEEP

12288:4Ap6VPwyNr4L8WeqttztIc7mzkUZsdxfZ5Aj:t6V4Yrq8iJj7QkU+d7

Score

N/A

Malware Config

Signatures

Files

4c7797eea73fa88b55e5762d90d1f1429f580775413fe9b1e02dc30a8b4e99e3
.exe windows x86

69971b0aeb6ef537a943ac7fafa9b9ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetSysColor
GetDC
SetCapture
GetScrollPos
GetFocus
GetWindowThreadProcessId
GetPropW
DestroyMenu
GetMenuItemInfoW
CreateIconIndirect
SetMenu
PtInRect

kernel32

ActivateActCtx
CreateActCtxA
CreateThread
ExitProcess
GetACP
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
SetErrorMode
lstrcmpA
FreeLibrary
VirtualQuery
GetVersionExA
GetModuleFileNameW
GetCommandLineW
GetLocaleInfoW
UnlockFile
GlobalAddAtomW
CloseHandle
GetConsoleOutputCP
GlobalGetAtomNameW
FileTimeToSystemTime
HeapSize

gdi32

SetTextColor
GetTextColor
SelectObject
CreateRectRgnIndirect
RectVisible
GetClipBox
GetObjectW
IntersectClipRect
SetBkColor
SaveDC
UnrealizeObject

imagehlp

BindImageEx

ole32

OleDuplicateData
OleGetClipboard
DoDragDrop
RegisterDragDrop
CoRevokeClassObject
OleInitialize
CreateILockBytesOnHGlobal
CoGetClassObject

oledlg

OleUIBusyW

comdlg32

GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comctl32

_TrackMouseEvent
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize

shell32

DragFinish
DragQueryFileW
ShellExecuteExW
ShellExecuteW

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW

gdiplus

GdipDrawImageI
GdiplusShutdown
GdipCreateBitmapFromStreamICM
GdiplusStartup
GdipDeleteGraphics

advapi32

RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW

Sections

.text
Size: 615KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

69971b0aeb6ef537a943ac7fafa9b9ff

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

imagehlp

ole32

oledlg

comdlg32

winspool.drv

comctl32

shell32

shlwapi

gdiplus

advapi32

Sections

.text Size: 615KB - Virtual size: 615KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 65KB - Virtual size: 65KB

.text
Size: 615KB - Virtual size: 615KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 65KB - Virtual size: 65KB