5e47d3af76ae5a1dc7919b637ba1c88fd259e2a23a3d91b6784b1bf278e140a4

Sharing

Copy URL Twitter E-mail

General

Target

5e47d3af76ae5a1dc7919b637ba1c88fd259e2a23a3d91b6784b1bf278e140a4
Size

37KB
MD5

2e88ca1ac8ec460e4551a340e85db0f0
SHA1

95002bea6f05fa2a2ad963e416eefddbe8a47643
SHA256

5e47d3af76ae5a1dc7919b637ba1c88fd259e2a23a3d91b6784b1bf278e140a4
SHA512

07568eb9804bd297f2eca95e10c8212de2b4160fb86fbad28622291bde8574012d9854fb678735288fcb82aac62e63bd2109a98a04ed7a760f0ed5a659294d62
SSDEEP

768:gm70XMoVVxiwI0YzjNZombSxHFyq34M6NoWLv171J6hIUoa:XXJ30ywp34M6Fv16hIza

Score

N/A

Malware Config

Signatures

Files

5e47d3af76ae5a1dc7919b637ba1c88fd259e2a23a3d91b6784b1bf278e140a4
.exe windows x86

119010e51ab3a0a7f4a401284f37a517

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove

advapi32

RegSetValueW
RegQueryInfoKeyW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegCloseKey
RegQueryValueW
RegEnumKeyExW
RegOpenKeyW
RegSetValueExW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyW

kernel32

FindFirstFileW
SetLastError
GetProcAddress
GetModuleHandleW
ExpandEnvironmentStringsW
MultiByteToWideChar
SetFilePointer
ReadFile
CreateFileW
LocalFree
FreeResource
LockResource
LoadResource
CloseHandle
FreeLibrary
EnumResourceNamesW
LoadLibraryExW
SetErrorMode
GetPrivateProfileStringW
WriteFile
FindClose
GlobalSize
GlobalReAlloc
GlobalUnlock
DeleteFileW
GetTempFileNameW
GetEnvironmentVariableW
lstrlenA
GetModuleFileNameW
RemoveDirectoryW
SetFileAttributesW
GetLastError
MoveFileW
MulDiv
WritePrivateProfileStringW
WinExec
LoadLibraryW
GetThreadLocale
ExitProcess
GetStartupInfoW
GetCommandLineW
SearchPathW
GetWindowsDirectoryW
GetSystemTimeAsFileTime
CreateProcessW
Sleep
GlobalAlloc
GlobalLock
lstrcmpW
GetPrivateProfileSectionW
lstrcpyW
lstrcatW
GlobalFree
lstrcpynW
lstrlenW
lstrcmpiW
LocalAlloc
FindResourceW

gdi32

GetTextExtentPointW
GetTextExtentExPointW
GetDeviceCaps

user32

LoadCursorW
SetCursor
SystemParametersInfoW
wvsprintfW
GetSystemMetrics
GetLastActivePopup
MessageBoxW
GetDlgItem
PeekMessageW
DispatchMessageW
SendDlgItemMessageW
GetDC
GetClientRect
ReleaseDC
DestroyWindow
CreateDialogParamW
SetDlgItemTextW
GetSystemMenu
EnableMenuItem
CopyRect
LookupIconIdFromDirectory
DdeDisconnectList
DdeUninitialize
SetForegroundWindow
DdeInitializeW
DdeCreateStringHandleW
DdeFreeStringHandle
GetDesktopWindow
GetClassNameW
DdeConnectList
DdeQueryNextServer
FindWindowW
GetWindow
SetPropW
CharNextW
LoadStringW
wsprintfW
DdeClientTransaction
GetPropW

comctl32

ord236
ord73
ord17
ord324
ord235
ord358
ord334
ord328
ord332
ord365
ord320
ord321
ord326
ord323

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shell32

SHChangeNotify
ord57
ord39
ord175
ord36
ord49
ord45
ord165
ord119
ord58
ord52
ord56
ord51
SHAddToRecentDocs
ord79
ord164
ord35
ord34
ord94
ord157
ord23
SHGetSpecialFolderLocation
ord128
ord31
ord32
ord29
FindExecutableW
ord37
ord33
ord25
ord195
ord196
ShellExecuteExW
SHGetPathFromIDListW
ord96
ord155
ord63

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

119010e51ab3a0a7f4a401284f37a517

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

comctl32

version

shell32

Sections

.text Size: 30KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 608B

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 30KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 608B

.rsrc
Size: 5KB - Virtual size: 4KB