fd6843ac29230102a40805142980e9adebec22399a0c8352accd403ebe49ea61

Sharing

Copy URL

Twitter E-mail

General

Target

fd6843ac29230102a40805142980e9adebec22399a0c8352accd403ebe49ea61
Size

312KB
MD5

caff01adca8f38e354939786a63ed6b3
SHA1

9af1211eaaf36bae95d35bd0de1990f95a6985dd
SHA256

fd6843ac29230102a40805142980e9adebec22399a0c8352accd403ebe49ea61
SHA512

ea087912a4ed5193f5647c9466b1d5dd0f95121b6ee28658002dc50c0c8e44a76a1687987deddeb3c19ee26cc8002bfa0943cb05124850b33b2098f83fcbb527
SSDEEP

6144:rIKSVwXHpFZOsG3kipCPkkONIZrgdfrFR/aVG7TtsCs7WQz+6Vo:Uo41338/OOr0rvEGHhQz+u

Score

N/A

Malware Config

Signatures

Files

fd6843ac29230102a40805142980e9adebec22399a0c8352accd403ebe49ea61
.exe windows x86

05e06e8066e1ff493103b1196b5ec9c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
CreateToolbarEx
ord15
CreatePropertySheetPageW
ord14
ord5
InitCommonControlsEx
PropertySheetW
ord13

shlwapi

StrChrA
StrCSpnW

kernel32

HeapFree
IsValidCodePage
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetACP
LoadLibraryW
ExitProcess
VirtualAllocEx
Sleep
GetCPInfo
GetProcAddress
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
EnterCriticalSection
GetModuleHandleA
GetStringTypeW
HeapAlloc
HeapReAlloc
GetOEMCP
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
IsProcessorFeaturePresent

netapi32

NetGetJoinableOUs
NetGetAnyDCName
NetGetJoinInformation
NetConnectionEnum
NetFileGetInfo
NetFileEnum

aclui

ord2
ord1

msvfw32

DrawDibDraw

avifil32

AVIPutFileOnClipboard
AVIFileAddRef
EditStreamSetNameW
AVIFileInfoW
AVIStreamSetFormat

setupapi

SetupDiGetINFClassA
SetupDiGetClassImageList
SetupDiUnremoveDevice
SetupDiInstallClassExA
SetupQueueDefaultCopyW
SetupOpenInfFileW
SetupInstallFileA
SetupQueueCopyW
SetupQueueRenameW

comdlg32

GetFileTitleW
ReplaceTextA
ChooseFontW
PageSetupDlgA

Sections

.poqazlo
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hxdr
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.erudf
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05e06e8066e1ff493103b1196b5ec9c6

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

kernel32

netapi32

aclui

msvfw32

avifil32

setupapi

comdlg32

Sections

.poqazlo Size: 55KB - Virtual size: 54KB

.rdata Size: 241KB - Virtual size: 241KB

.data Size: 8KB - Virtual size: 27KB

.hxdr Size: 5KB - Virtual size: 5KB

.erudf Size: 512B - Virtual size: 32B

.rsrc Size: 512B - Virtual size: 16B

.poqazlo
Size: 55KB - Virtual size: 54KB

.rdata
Size: 241KB - Virtual size: 241KB

.data
Size: 8KB - Virtual size: 27KB

.hxdr
Size: 5KB - Virtual size: 5KB

.erudf
Size: 512B - Virtual size: 32B

.rsrc
Size: 512B - Virtual size: 16B