863d5b566ca1370b40fef0f77756169d24d7a088ab926c3c324b447b589a40cf

Sharing

Copy URL Twitter E-mail

General

Target

863d5b566ca1370b40fef0f77756169d24d7a088ab926c3c324b447b589a40cf
Size

84KB
MD5

ef56ff51d4b2f536060200d2772df4e2
SHA1

78d3029f8644151ee53a8b80bf6728d4a6fcae19
SHA256

863d5b566ca1370b40fef0f77756169d24d7a088ab926c3c324b447b589a40cf
SHA512

7747628d20590dba42fdf8ec95d19f48ab742f20ebff48533854a1fc4e3fc5e22760669c4a3677f9cff6dbccbc416344a44ce045949304136fd975df7a723d25
SSDEEP

1536:8cThpcdEnGxJ0DxxsiEDASj1ewYIXGstOJPp8Eo2uR:gd+2J0DLslDj13HtOr8Eo24

Score

N/A

Malware Config

Signatures

Files

863d5b566ca1370b40fef0f77756169d24d7a088ab926c3c324b447b589a40cf
.exe windows x86

747ba1278225ad06c11cb647cee5f9c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
wcslen
__p__fmode
_acmdln
__p__commode
sqrt
__set_app_type
exit
strncpy
__getmainargs
_except_handler3
_exit
_adjust_fdiv
_snprintf
__setusermatherr
strncmp
_initterm
calloc
free
strcpy
fwrite
_errno

kernel32

ReadFile
FreeLibrary
GetConsoleOutputCP
GetStdHandle
ExitProcess
CompareStringA
InterlockedIncrement
RaiseException
GetACP
MulDiv
GetModuleHandleW
GetUserDefaultLangID
WriteFile
IsDebuggerPresent
SetThreadLocale
CreateProcessA
CompareFileTime
VirtualQuery
FlushFileBuffers
GetLocaleInfoW
GetFileAttributesW
GetStartupInfoA
DeviceIoControl
GetEnvironmentVariableA
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
FileTimeToDosDateTime
SystemTimeToFileTime

oleaut32

SafeArrayGetElement
SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
VariantCopyInd
VariantInit
SafeArrayCreate

advapi32

RegDeleteKeyW
RegSetValueExA
DeleteService
AddAccessAllowedAce
SetSecurityDescriptorOwner
GetUserNameA
RegQueryValueA
LookupPrivilegeValueA
RegSetValueExW

comctl32

ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_Remove
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_SetDragCursorImage
InitCommonControlsEx
ImageList_AddMasked

gdi32

SetDIBits
GdiFlush
CombineRgn
StartDocW
GetObjectW
DeleteObject
EndPath
PolyDraw
EnumFontFamiliesW
GetDIBColorTable
CreateBrushIndirect
GetStretchBltMode
GetRgnBox

user32

TrackPopupMenu
CharNextA
DialogBoxParamA
InsertMenuA
IsDialogMessageA
GetMessagePos

ole32

CreateStreamOnHGlobal
IIDFromString
StringFromIID
OleSetClipboard
StringFromCLSID
OleIsCurrentClipboard
DoDragDrop
OleSetMenuDescriptor

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

747ba1278225ad06c11cb647cee5f9c8

Headers

File Characteristics

Imports

msvcrt

kernel32

oleaut32

advapi32

comctl32

gdi32

user32

ole32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 58KB - Virtual size: 58KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 58KB - Virtual size: 58KB

.rsrc
Size: 3KB - Virtual size: 2KB