3d2b0f9e5befb995adb55f15359868ce09026b2dd78e8ba447a77cf763dd60d9

Sharing

Copy URL Twitter E-mail

General

Target

3d2b0f9e5befb995adb55f15359868ce09026b2dd78e8ba447a77cf763dd60d9
Size

129KB
MD5

5dd040a0c9856a8a1563fec012959f30
SHA1

1b417c5e3192b25f4a7252d7cac03270485abc6b
SHA256

3d2b0f9e5befb995adb55f15359868ce09026b2dd78e8ba447a77cf763dd60d9
SHA512

cc5c31ef3387b71e5bddec2b0319ea640daeb3042522af4f3ccb139a2ee3ab76ce758da4da295d1d3f4ad8cce883a4415db4bc61c1999dfb4bce9f0f9d93aaf7
SSDEEP

1536:71ObA4pLNhaZcOpwlLUT/YeUByiTpc2B+hDOHO1zKFDPY3zV/Qz83V9SRKt:7oA4pLN4yOGLUT/Yey+hj18DgpFbSct

Score

N/A

Malware Config

Signatures

Files

3d2b0f9e5befb995adb55f15359868ce09026b2dd78e8ba447a77cf763dd60d9
.exe windows x86

bbfc40caf3b1514fd5dfe979af31f709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

tan
wcstol
_acmdln
cos
time
pow
srand
rand

comctl32

ImageList_Create
ImageList_Destroy
ImageList_Add
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Read

shlwapi

PathFileExistsA
SHDeleteKeyA
PathIsContentTypeA
SHQueryValueExA
SHSetValueA
SHQueryInfoKeyA
SHDeleteValueA
SHEnumValueA
SHStrDupA
PathGetCharTypeA

user32

OpenClipboard
RemoveMenu
GetScrollInfo
RegisterClassA
OffsetRect
IsZoomed
CharNextA
WaitMessage
GetKeyboardLayoutList
CharLowerA
DefWindowProcA
FindWindowA
SetCursor
DispatchMessageA
PostMessageA
UnregisterClassA
RedrawWindow
DefFrameProcA
TranslateMessage
CreateMenu
ScreenToClient
GetDesktopWindow
GetClientRect
GetMenuItemID
ShowOwnedPopups
GetKeyboardState
ClientToScreen
MsgWaitForMultipleObjects

gdi32

CreateCompatibleBitmap
SetBkColor
CreateDIBitmap
GetDCOrgEx
SelectObject

oleaut32

OleLoadPicture

shell32

SHGetDiskFreeSpaceA

comdlg32

GetFileTitleA
FindTextA
GetOpenFileNameA

kernel32

GetModuleHandleA
GetOEMCP
WideCharToMultiByte
GetProcAddress
GetCommandLineA
MoveFileExA
GetVersion
ResetEvent
LoadLibraryA
GetDiskFreeSpaceA
GlobalDeleteAtom
GetSystemDefaultLangID
VirtualAlloc
RaiseException
ExitThread
GetCurrentProcessId
ExitProcess
LoadLibraryExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbfc40caf3b1514fd5dfe979af31f709

Headers

File Characteristics

Imports

msvcrt

comctl32

shlwapi

user32

gdi32

oleaut32

shell32

comdlg32

kernel32

Sections

.text Size: 33KB - Virtual size: 33KB

.data Size: 70KB - Virtual size: 70KB

.rdata Size: 12KB - Virtual size: 11KB

.adata Size: 2KB - Virtual size: 1KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 33KB - Virtual size: 33KB

.data
Size: 70KB - Virtual size: 70KB

.rdata
Size: 12KB - Virtual size: 11KB

.adata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 10KB - Virtual size: 9KB