d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a

General

Target

d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a
Size

219KB
MD5

bdafddcdf44fa5e0217f22db80337781
SHA1

4ccb9cfcb6837adcb0861f89142599efbccf54c3
SHA256

d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a
SHA512

86cd0e78ce73799ed2da11d7e08cc83a58d46e7db0ddb229fce17e5203a0c8b553515a06377212e7911bcf0fbb7804006bb58f244b4f6e077d0cfdc91f992d07
SSDEEP

3072:MeGMtEOzT7LEoZMYMfIcsSuYu75jeeP4Y1pfhJ/TA9rl3pl5+:hGMeOzT7zMfIBR/j34Y1nJ/kplU

Score

N/A

Malware Config

Signatures

Files

d4822c13da68734e990ead95e483876149adb40a12fa0bae7266349c8237fe6a
.exe windows x86

31d3c56c3f99c7b16848b8b0afc2ce3d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shimeng

SE_DllLoaded
SE_InstallAfterInit

user32

GetCaretPos
PeekMessageA
DispatchMessageA
GetPropA
LoadImageW
IsWindow
GetWindowLongW
LoadMenuA
DialogBoxParamA
PostMessageA
EnableWindow
wsprintfA
CreateDesktopA
GetMessageA

kernel32

GetGeoInfoA
GetCurrentProcess
CreateDirectoryA
CloseHandle
GetProcessHeap
GetProcessId
WriteConsoleA
GetLogicalDriveStringsA
UpdateResourceA
GetAtomNameA
GetConsoleAliasW
FormatMessageA
GetModuleHandleA
LoadLibraryW
SetEnvironmentVariableW
WaitForSingleObjectEx
GetTimeFormatA
GetCommandLineA
CompareStringA
VirtualAlloc
GetCurrentDirectoryA
GetDateFormatW
HeapAlloc
ReadFile
CreateFileA
CreateNamedPipeA
GetConsoleTitleW
GetNumberFormatW
GetComputerNameA
GetFullPathNameA

uxtheme

GetThemeRect
DrawThemeBackground
OpenThemeData
GetWindowTheme
GetThemeBool
CloseThemeData
IsThemeActive
GetThemeColor
GetThemeTextExtent
GetThemeTextMetrics
GetThemeSysSize

msimg32

GradientFill
TransparentBlt
DllInitialize
AlphaBlend
vSetDdrawflag

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31d3c56c3f99c7b16848b8b0afc2ce3d

Headers

DLL Characteristics

File Characteristics

Imports

shimeng

user32

kernel32

uxtheme

msimg32

Sections

.text Size: 193KB - Virtual size: 192KB

.data Size: 5KB - Virtual size: 4KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 193KB - Virtual size: 192KB

.data
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 20KB - Virtual size: 20KB