509dec406d04ac72e6ee0f916e702e232cb1d1ec49a6caf7cca4e526174ac931

Sharing

Copy URL Twitter E-mail

General

Target

509dec406d04ac72e6ee0f916e702e232cb1d1ec49a6caf7cca4e526174ac931
Size

244KB
MD5

d7f8f1a8bc0816e59fbb01e5e332101a
SHA1

456956a10794726f0e669410b96f2fa9c2743224
SHA256

509dec406d04ac72e6ee0f916e702e232cb1d1ec49a6caf7cca4e526174ac931
SHA512

fe44a7b6825e686a898f24bd25d72b2abc45e47d38c5a640be2e24a0d04e5f9eee9b43cd5437114917e145e1d3f6b8bcc11cf7337aa7e91aba5038cf95e1062d
SSDEEP

3072:/p/gYrnvH6usNZws9KJrGm/Z9tw8yPd9TAuOtBmzOOGiL+E5PQOwAOq6ZOy3zg:x48vfsiDZPO9TxOyVLBK3q6gyD

Score

N/A

Malware Config

Signatures

Files

509dec406d04ac72e6ee0f916e702e232cb1d1ec49a6caf7cca4e526174ac931
.exe windows x86

4ecbcb5a531a1e8c3e7785273b885339

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

fopen
fclose
_except_handler3
wcslen
calloc
free
strstr
sprintf
_mbsstr
strncmp
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_vsnprintf
realloc
printf
vsprintf
_mbschr
_fullpath
_stat64
_stricmp
memchr
_errno
fgets
_mbsrchr
getenv
strcspn
isalnum
_strdup
_strnicmp
_getpid
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
malloc
__p__commode

vmcontrolpanel.cpl

enableSystemTrayExport
getEnableSystemTrayExport

user32

FindWindowA
RegisterWindowMessageA
LoadIconA
RegisterClassA
CreateWindowExA
SetTimer
KillTimer
DefWindowProcA
CreatePopupMenu
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
TrackPopupMenuEx
DestroyMenu
GetMessageA
DispatchMessageA
TranslateMessage
LoadImageA
LoadStringA
DestroyIcon
PostMessageA
AppendMenuA

shell32

ShellExecuteA
Shell_NotifyIconA

advapi32

GetUserNameA
OpenThreadToken
ImpersonateSelf
RevertToSelf
GetFileSecurityA
MapGenericMask
AccessCheck
RegQueryValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CloseServiceHandle

kernel32

UnlockFileEx
DeleteFileA
GetCurrentProcessId
LockFileEx
WaitForSingleObject
ReleaseMutex
CreateMutexA
VirtualFree
WriteFile
SetFilePointer
VirtualAlloc
GetTempPathA
GetCurrentThread
GetFileAttributesA
CreateFileA
FormatMessageA
LocalFree
OutputDebugStringA
GetStartupInfoA
GetModuleHandleA
lstrcatA
lstrlenA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
CloseHandle
GetVersionExA
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
WinExec

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4ecbcb5a531a1e8c3e7785273b885339

Headers

File Characteristics

Imports

msvcr71

vmcontrolpanel.cpl

user32

shell32

advapi32

kernel32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 8KB - Virtual size: 6KB

.tc Size: 196KB - Virtual size: 196KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 8KB - Virtual size: 6KB

.tc
Size: 196KB - Virtual size: 196KB