f3cc94edcd84798f7fe8299311afaa9f5801ea241183125aa74e17e6dbd698f0

Sharing

Copy URL

Twitter E-mail

General

Target

f3cc94edcd84798f7fe8299311afaa9f5801ea241183125aa74e17e6dbd698f0
Size

140KB
MD5

e25b989b80f9ec7344754fe47828f8d3
SHA1

134653a26c79ec48c2ccfa1c9bb855e4fdb1cd25
SHA256

f3cc94edcd84798f7fe8299311afaa9f5801ea241183125aa74e17e6dbd698f0
SHA512

ebd662b8dc895a15708c2af4148bef8baf9a971ee9a07cbe8a9195a8381955946825d2a5574c47ded991998c766f8c350f1057501266e77bf637b2bce41711e1
SSDEEP

1536:yOyiGUJJXGPteKPNA3aBn+ryflYTbHyHvbnMJ4LIfN+AzaNPPRu+RsA:yOOUnf6n+ryfuTbSP7MJ4mPzaZ/RsA

Score

N/A

Malware Config

Signatures

Files

f3cc94edcd84798f7fe8299311afaa9f5801ea241183125aa74e17e6dbd698f0
.exe windows x86

ad2b65e095e503c2223e573f9a5bf0e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHFileOperationW
ShellExecuteW
SHBrowseForFolderW

ole32

OleInitialize
CoTaskMemFree
CoCreateInstance
OleUninitialize

gdi32

GetStockObject
SetBkColor
GetDeviceCaps
SelectObject
CreateFontIndirectW
SetBkMode
DeleteObject
GetTextExtentPoint32W
SetTextColor

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GetStringTypeA
GetStringTypeW
GetCommandLineA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
GetProcessAffinityMask
GetThreadPriority
GetProcessTimes
GetTapeParameters
CreateIoCompletionPort
EscapeCommFunction
FlushFileBuffers
FlushViewOfFile
CancelWaitableTimer
GlobalUnfix
GetLastError
FindFirstFileExW
SetProcessWorkingSetSize
FindNextChangeNotification
TlsSetValue
SetTapePosition
TransmitCommChar
PrepareTape
GetThreadIOPendingFlag
GetExitCodeThread
ReadFileScatter
UpdateResourceW
SetStdHandle
ConvertThreadToFiber
AreFileApisANSI
EraseTape
CreateTimerQueue
GetFileType
SetMailslotInfo
CreateMemoryResourceNotification
GetThreadTimes
ReleaseSemaphore
QueueUserAPC
IsProcessInJob
LocalUnlock
SetCommBreak
CreateFileMappingW
GetProcessIoCounters
GetModuleFileNameA
PostQueuedCompletionStatus
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad2b65e095e503c2223e573f9a5bf0e1

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

gdi32

comctl32

version

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 66KB - Virtual size: 65KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 66KB - Virtual size: 65KB