aa5712a5c579b52cf84d00c6dac57ed51abab07621208d26b7f2f2eeef649b84

Sharing

Copy URL Twitter E-mail

General

Target

aa5712a5c579b52cf84d00c6dac57ed51abab07621208d26b7f2f2eeef649b84
Size

194KB
MD5

bc45757ae73aa50d8333bdadfff59d3a
SHA1

419531f6e82644b8763965e7cc492f2f7889d031
SHA256

aa5712a5c579b52cf84d00c6dac57ed51abab07621208d26b7f2f2eeef649b84
SHA512

7c25a4ef04d4409623a462f6a8a46dc0c16522ff7614054e62ad7017c398823b1fbce5723ef3a237bd3602e3c91d94b4415336504cb3f3d0f0c99d35c8373419
SSDEEP

1536:+vaNgK/WqkUsi8eKJAa+47Vh4vlFpaV7gBe6c/fulTxH0pwYGUIM0oGh8xiB6BG7:2+bJ8eKdlVh4vvS7gBFc/WBnnSK+2/sE

Score

N/A

Malware Config

Signatures

Files

aa5712a5c579b52cf84d00c6dac57ed51abab07621208d26b7f2f2eeef649b84
.exe windows x86

0e4e2d99b7a0f691a6fcfacb94fc2e99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

LocalAlloc
LocalFree
lstrcpyA
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryW
Sleep
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetLastError
GetStdHandle
IsValidCodePage
HeapCreate
WriteFile
ExitProcess
GetProcAddress
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
HeapAlloc
AllocConsole
GetNativeSystemInfo
TlsAlloc
RtlUnwind
lstrcmpA
EncodePointer
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
TerminateProcess
GetCurrentProcess

user32

GetMenu
GetWindow
CopyRect
CharToOemA
CheckMenuItem
EnumDisplayMonitors
GetClassNameA
GetSystemMenu
GetWindowRect
IsMenu
InsertMenuItemA
IsIconic
GetSubMenu
LoadStringA
LoadCursorA
CharUpperA
EnumDisplaySettingsA
GetClientRect
GetMenuCheckMarkDimensions
GetMonitorInfoA
GetParent
RegisterClassExW
OemToCharA
MessageBoxA
GetWindowLongA
CreateWindowExA
GetMenuState
GetDesktopWindow
GetSysColor
SetWindowPos
IsDlgButtonChecked
CreateDialogParamW
CreateWindowExW
GetSystemMetrics
IsWindowVisible
MapWindowPoints

gdi32

SetBkColor
SelectObject
SetTextColor

shell32

SHParseDisplayName
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CoTaskMemFree
CoInitialize
StgCreateDocfile
OleInitialize
CoGetMalloc

avifil32

AVIFileInit
AVIFileOpenA

shlwapi

StrPBrkA

comctl32

InitCommonControlsEx

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e4e2d99b7a0f691a6fcfacb94fc2e99

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

avifil32

shlwapi

comctl32

setupapi

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 22KB - Virtual size: 25KB

.rsrc Size: 115KB - Virtual size: 115KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 22KB - Virtual size: 25KB

.rsrc
Size: 115KB - Virtual size: 115KB