169b62e860d591d687248fb2b45861ed19d0720da4513a898ac95c313b696d1d

Sharing

Copy URL

Twitter E-mail

General

Target

169b62e860d591d687248fb2b45861ed19d0720da4513a898ac95c313b696d1d
Size

186KB
MD5

e16d01d0118e21114dfa768ea202b000
SHA1

67f655d7b56de913b5ce2935d2c95596087267bc
SHA256

169b62e860d591d687248fb2b45861ed19d0720da4513a898ac95c313b696d1d
SHA512

70425b4842abcca59a524c5908185f00643fe56fd3bbd8f98de8e0214b68e861dafe99bc5cf993e5d05fd3ac1236202a53962244ec6e204a330e996fb6ffb178
SSDEEP

1536:AlynghFPBs1hE+pnkyjeK56NNUcLDFr+ycjAcMP:TpG+pnkyjpUNC2FrIAcq

Score

N/A

Malware Config

Signatures

Files

169b62e860d591d687248fb2b45861ed19d0720da4513a898ac95c313b696d1d
.exe windows x86

7f95a79e46346551ca44bccf7679bd02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
ChooseFontA
GetOpenFileNameA

ole32

OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree

advapi32

RegOpenKeyExA
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryInfoKeyA
RegFlushKey
RegEnumKeyExA
RegCreateKeyExA
InitializeSecurityDescriptor
RegQueryValueExA
RegCloseKey

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

ReleaseSemaphore
ClearCommError
GetWriteWatch
CreateTapePartition
IsProcessInJob
WTSGetActiveConsoleSessionId
GetProcessHandleCount
SetProcessPriorityBoost
ClearCommBreak
GetCommandLineA
GetProcessHeap
GetCurrentThreadId
FlushFileBuffers
SetLastError
GetStdHandle
DecodePointer
GlobalUnWire
SetMessageWaitingIndicator
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f95a79e46346551ca44bccf7679bd02

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

ole32

advapi32

version

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 105KB - Virtual size: 6.5MB

.rsrc Size: 44KB - Virtual size: 43KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 105KB - Virtual size: 6.5MB

.rsrc
Size: 44KB - Virtual size: 43KB