aa9ab016b732cee7725b950890bafb66403259d759e1b479ce8fe4e538c6d9b9

Sharing

Copy URL Twitter E-mail

General

Target

aa9ab016b732cee7725b950890bafb66403259d759e1b479ce8fe4e538c6d9b9
Size

216KB
MD5

0e15188657c1e632af04b86bde613c2a
SHA1

7840ba75280c0dcafe543fcc47cad659a700371b
SHA256

aa9ab016b732cee7725b950890bafb66403259d759e1b479ce8fe4e538c6d9b9
SHA512

9f55f680684829834f219f798192d5e077f345dd8a8f2f14888bc4a944b5025205a0bae7c5c42131885687389e42edcba46595a5559bee00b615d46c5829015b
SSDEEP

3072:piUo+FNwOgKBSsh6EfcRlhuKUvObmbYT6dEiHMLpV2jJ3CKVjwxH5UtfDR51UR:BougKY86EfcRHuKOObkqnisdNfSfI

Score

N/A

Malware Config

Signatures

Files

aa9ab016b732cee7725b950890bafb66403259d759e1b479ce8fe4e538c6d9b9
.exe windows x86

b631d3a8c6ab51a0e5bf0eaf9932f3a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcpyA
GetStringTypeExA
GetFileTime
GetDateFormatA
IsDebuggerPresent
GetStartupInfoA
GetModuleFileNameW
GetNumberFormatA
GlobalUnlock
lstrcmpiA
GetLocalTime
CreateProcessW
GetConsoleMode
GetStartupInfoW
LocalFileTimeToFileTime
GetConsoleOutputCP
VirtualProtectEx

user32

IsZoomed
SetScrollInfo
GetMessagePos
SetCapture
InflateRect
GetSystemMenu
SetDlgItemTextA
GetSysColor

msvcrt

_cexit
__getmainargs
_except_handler3
_adjust_fdiv
calloc
realloc
__set_app_type
malloc
atexit
atoi
strlen
_initterm
__setusermatherr
sqrt
__p__fmode
fputs
fread
strstr
_acmdln
_write
_snprintf
_vsnprintf
_strnicmp
__dllonexit
_exit
__p__commode
free

comdlg32

GetOpenFileNameA

ole32

CreateStreamOnHGlobal
OleFlushClipboard
OleSetMenuDescriptor
CoFreeUnusedLibraries
CLSIDFromString
ProgIDFromCLSID
OleSetClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
OleInitialize

advapi32

RegCreateKeyA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegCreateKeyExW
SetSecurityDescriptorDacl
RegCloseKey
OpenSCManagerA
CopySid
RegQueryInfoKeyW
OpenServiceA
RegQueryValueExA
CheckTokenMembership
RegEnumKeyExW
DeregisterEventSource
CryptHashData
QueryServiceStatus
AddAccessAllowedAce

comctl32

ImageList_GetIcon
ImageList_GetIconSize
ImageList_DragLeave
CreatePropertySheetPageW
ImageList_Write
ImageList_Draw
ImageList_LoadImageW
PropertySheetW
ImageList_Destroy

gdi32

SetWorldTransform
GetTextExtentPoint32A
IntersectClipRect
CreateHatchBrush
SetTextAlign
Pie
RectInRegion
SetRectRgn
SetViewportOrgEx
GetTextMetricsA
Polyline
ExtFloodFill
SetPixel

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b631d3a8c6ab51a0e5bf0eaf9932f3a0

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

comdlg32

ole32

advapi32

comctl32

gdi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 54KB - Virtual size: 195KB

.rsrc Size: 154KB - Virtual size: 153KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 54KB - Virtual size: 195KB

.rsrc
Size: 154KB - Virtual size: 153KB