a3d0f2fadf65ba8c512d2c573e06851c2b07f9c44b00f381843d946d7d28603c

Sharing

Copy URL Twitter E-mail

General

Target

a3d0f2fadf65ba8c512d2c573e06851c2b07f9c44b00f381843d946d7d28603c
Size

111KB
MD5

1719ca559c3c27174ea5d51209eae799
SHA1

7389cf409c37a0e086fe4e88106cf13d12180d99
SHA256

a3d0f2fadf65ba8c512d2c573e06851c2b07f9c44b00f381843d946d7d28603c
SHA512

1429b207e4c839c8991ca2900c508caa30be301bcf3ade51dc87ecd91df2094a2e6b7452b29d73823ce9399b1017eef92e22dbdbf6a34dc8e5a13db240708613
SSDEEP

1536:/zPXh7FcbQqdwvJZBsNjvPvDgtq/CwjLR5yr8SLSxQ4WwlsoGRnn3+2PCDgl2tuj:/zBAaJslW9O1o8S2xQ4BF8n3rCcl2tuj

Score

N/A

Malware Config

Signatures

Files

a3d0f2fadf65ba8c512d2c573e06851c2b07f9c44b00f381843d946d7d28603c
.exe windows x86

61eef001eec04c8505ff31b24e74004b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsA
VirtualProtectEx
IsValidCodePage
VirtualQuery
FileTimeToSystemTime
GetModuleHandleW
SetCurrentDirectoryA
CreateProcessA
LocalFileTimeToFileTime
GetEnvironmentStrings
LocalFree
lstrcmpiW
InterlockedDecrement
GetThreadLocale
RaiseException
GetNumberFormatA
WritePrivateProfileStringA
GetFileType
CreateFileMappingA
GetLocaleInfoW
GetSystemTime

msvcrt

_iob
fopen
strcpy
__set_app_type
__p__commode
__p___initenv
strrchr
_except_handler3
_initterm
_XcptFilter
__getmainargs
__p__fmode
free
_adjust_fdiv
_exit
atoi
exit
_controlfp
calloc
__setusermatherr
sqrt
memset
memcpy
fputs

comdlg32

GetOpenFileNameA

user32

SetDlgItemTextA
GetScrollInfo
EnumThreadWindows
GetWindowLongA
IsChild
DestroyWindow
IsRectEmpty
TrackPopupMenu
EqualRect
GetWindowThreadProcessId

gdi32

PolylineTo
Polyline
ScaleViewportExtEx
SetTextAlign
SetWinMetaFileBits
SetBrushOrgEx
SetDIBitsToDevice
SetWorldTransform
CreateHalftonePalette
ExtEscape
DPtoLP
EndPath
ExtCreatePen
ExtCreateRegion

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoDisconnectObject
DoDragDrop
CoSetProxyBlanket
OleIsCurrentClipboard
CoInitializeSecurity
CoRevokeClassObject
StgOpenStorageOnILockBytes
OleFlushClipboard
StringFromGUID2

comctl32

PropertySheetA
InitCommonControlsEx
ImageList_Create
CreatePropertySheetPageA
ImageList_Read
ImageList_Add
ImageList_SetBkColor
CreateStatusWindowA
ImageList_GetImageCount
ImageList_GetIconSize
CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_SetImageCount
ImageList_BeginDrag
ImageList_SetOverlayImage

advapi32

OpenThreadToken
RegCreateKeyA
GetSecurityDescriptorDacl
RegQueryValueA
RegOpenKeyExA
InitiateSystemShutdownA
GetTokenInformation
FreeSid
RegCreateKeyExA
RegOpenKeyW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61eef001eec04c8505ff31b24e74004b

Headers

File Characteristics

Imports

kernel32

msvcrt

comdlg32

user32

gdi32

ole32

comctl32

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 9KB - Virtual size: 46KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 9KB - Virtual size: 46KB

.rsrc
Size: 22KB - Virtual size: 22KB