e2b86e038aa353c248a2eaad8d952efb63aa775ca3aca55eb554323792f6bf57

Sharing

Copy URL

Twitter E-mail

General

Target

e2b86e038aa353c248a2eaad8d952efb63aa775ca3aca55eb554323792f6bf57
Size

560KB
MD5

305e8cd6ad5656bbd1512be5d8fbed2c
SHA1

679d0835351e72469dc28f7095f90aa9d6c58c19
SHA256

e2b86e038aa353c248a2eaad8d952efb63aa775ca3aca55eb554323792f6bf57
SHA512

249249e5be76487a74ef0c933337f423e5cd844614d11c5efa79ab458ee1f5ed0be4457ffb9ffebc533c6cdff15b6915c8d07cd9d3dbd4a67c2457b9131d21cb
SSDEEP

12288:53PdhdvlllLAs7D0ENJa69LdkeVozD9zH1SsnTLG1:5/vHAqD0ENVw9Tg8G1

Score

N/A

Malware Config

Signatures

Files

e2b86e038aa353c248a2eaad8d952efb63aa775ca3aca55eb554323792f6bf57
.exe windows x86

c46c6a7f4726fc1e46d744dc40103678

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

glu32

gluQuadricNormals
gluProject
gluTessEndPolygon
gluEndCurve
gluPickMatrix
gluBuild1DMipmaps
gluNewQuadric
gluSphere
gluOrtho2D
gluNewNurbsRenderer
gluTessProperty
gluTessEndContour
gluScaleImage

comctl32

PropertySheetW
ord14
FlatSB_GetScrollRange
_TrackMouseEvent
ord6
ord15
FlatSB_GetScrollInfo
FlatSB_SetScrollRange
FlatSB_EnableScrollBar
UninitializeFlatSB
DestroyPropertySheetPage
CreateStatusWindowW
FlatSB_GetScrollPos

advapi32

ReadEventLogW
RegLoadKeyA
OpenProcessToken
RegUnLoadKeyA
AdjustTokenGroups
RegEnumKeyA
OpenBackupEventLogA
AccessCheck
OpenEventLogA
ReadEventLogA
RegCreateKeyExA
RegEnumKeyExA
RegQueryMultipleValuesA

shlwapi

PathGetArgsW
PathIsRelativeA
ChrCmpIA
SHEnumKeyExA
SHRegGetBoolUSValueW
SHRegEnumUSValueA
PathRemoveBlanksW
SHRegQueryUSValueW
PathUnquoteSpacesA

kernel32

VerLanguageNameA
GetProfileStringA
GetPrivateProfileStructA
GetModuleHandleA
GetProcAddress
VirtualAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
SetFilePointer
InitializeCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
InterlockedDecrement
InterlockedIncrement
SetStdHandle
CloseHandle
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW

version

VerFindFileA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
VerInstallFileA

uxtheme

GetThemeMetric
SetThemeAppProperties
GetThemeFont
GetThemeBool
IsThemeActive
IsThemePartDefined
DrawThemeText
GetThemeSysColorBrush
GetThemePartSize
GetWindowTheme
GetCurrentThemeName
DrawThemeEdge
GetThemeSysSize
GetThemeSysInt
GetThemePosition

usp10

ScriptStringValidate
ScriptStringFree
ScriptFreeCache
ScriptLayout
ScriptCacheGetHeight
ScriptBreak
ScriptGetFontProperties
ScriptJustify
ScriptString_pcOutChars
ScriptStringAnalyse
ScriptShape
ScriptTextOut
ScriptItemize
ScriptXtoCP
ScriptString_pSize

aclui

ord1
ord2

gpedit

ExportRSoPData

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 499KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c46c6a7f4726fc1e46d744dc40103678

Headers

File Characteristics

Imports

glu32

comctl32

advapi32

shlwapi

kernel32

version

uxtheme

usp10

aclui

gpedit

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 13KB - Virtual size: 555KB

.rsrc Size: 499KB - Virtual size: 499KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 13KB - Virtual size: 555KB

.rsrc
Size: 499KB - Virtual size: 499KB