ae0a6a1b203390b236aa9b12f3e266000014f899a784bd3489a9b5c20a3cb134

Sharing

Copy URL

Twitter E-mail

General

Target

ae0a6a1b203390b236aa9b12f3e266000014f899a784bd3489a9b5c20a3cb134
Size

137KB
MD5

6d2bc1cf44cf3aa92553ae9dab3f9ab5
SHA1

59d2ec447d65e742fad1570ae429e124ede97f27
SHA256

ae0a6a1b203390b236aa9b12f3e266000014f899a784bd3489a9b5c20a3cb134
SHA512

67b1c00f7883790e8b2da2a99c4cca969361ada740cd9a82463dd3be8352aa881e509ef09b669b4a3fecdfbb214757890d94dcbbc16f364397ffd3a3fb577942
SSDEEP

1536:ROyiGUJJXGPteKPNA3aBn+ry5f1HyHvbnMJ4LDVXCH10ZhGqtGFoVRsF:ROOUnf6n+ry5f1SP7MJ48+GwGARsF

Score

N/A

Malware Config

Signatures

Files

ae0a6a1b203390b236aa9b12f3e266000014f899a784bd3489a9b5c20a3cb134
.exe windows x86

ad2b65e095e503c2223e573f9a5bf0e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHFileOperationW
ShellExecuteW
SHBrowseForFolderW

ole32

OleInitialize
CoTaskMemFree
CoCreateInstance
OleUninitialize

gdi32

GetStockObject
SetBkColor
GetDeviceCaps
SelectObject
CreateFontIndirectW
SetBkMode
DeleteObject
GetTextExtentPoint32W
SetTextColor

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

GetStringTypeA
GetStringTypeW
GetCommandLineA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
GetProcessAffinityMask
GetThreadPriority
GetProcessTimes
GetTapeParameters
CreateIoCompletionPort
EscapeCommFunction
FlushFileBuffers
FlushViewOfFile
CancelWaitableTimer
GlobalUnfix
GetLastError
FindFirstFileExW
SetProcessWorkingSetSize
FindNextChangeNotification
TlsSetValue
SetTapePosition
TransmitCommChar
PrepareTape
GetThreadIOPendingFlag
GetExitCodeThread
ReadFileScatter
UpdateResourceW
SetStdHandle
ConvertThreadToFiber
AreFileApisANSI
EraseTape
CreateTimerQueue
GetFileType
SetMailslotInfo
CreateMemoryResourceNotification
GetThreadTimes
ReleaseSemaphore
QueueUserAPC
IsProcessInJob
LocalUnlock
SetCommBreak
CreateFileMappingW
GetProcessIoCounters
GetModuleFileNameA
PostQueuedCompletionStatus
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad2b65e095e503c2223e573f9a5bf0e1

Headers

DLL Characteristics

File Characteristics

Imports

shell32

ole32

gdi32

comctl32

version

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 63KB - Virtual size: 63KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 63KB - Virtual size: 63KB