7491be22e417e218e9a0c3a39a3d9c8715809c6e69554b905308cc8b1a437105

Sharing

Copy URL Twitter E-mail

General

Target

7491be22e417e218e9a0c3a39a3d9c8715809c6e69554b905308cc8b1a437105
Size

87KB
MD5

48a6570480860598f7630ac06615d590
SHA1

474e12c170f08819e439f4675221d9654dac3e46
SHA256

7491be22e417e218e9a0c3a39a3d9c8715809c6e69554b905308cc8b1a437105
SHA512

b41e70f471cd6797bf41d8af5affd140eec302ed9d832d3d64795b926b80aa9b823edc2dc2635ff5497e26bb76b0326dad4b218ffc7e5f1f0e31c40759bc606a
SSDEEP

1536:R3t65nO1e7zHHsdR6ZBmXgP9TOfExUycAJgR5KMrew0YN/pHGa87fvBJhur7wYWM:RU5nKIM/6ZBP1yWUuJgyyN/pnInBJhdM

Score

N/A

Malware Config

Signatures

Files

7491be22e417e218e9a0c3a39a3d9c8715809c6e69554b905308cc8b1a437105
.exe windows x86

3872d1720295f6c6584ca4756304e887

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p___initenv
memset
__setusermatherr
_adjust_fdiv
fwrite
fopen
strstr
_exit
calloc
_initterm
fclose
strncpy
__dllonexit
strchr
__set_app_type
_controlfp
__p__fmode
__p__commode
getenv
_iob
free
_stricmp
__getmainargs
_except_handler3
_strnicmp
_XcptFilter

kernel32

GetCommandLineW
GetSystemDirectoryA
GetFileType
GetProcAddress
GetOEMCP
VirtualProtectEx
GetProcessHeap
GetStartupInfoW
SetHandleCount
CompareStringA
GetThreadLocale
GetModuleHandleW
IsBadCodePtr
SetFileTime

user32

ScrollWindow
SetScrollRange
GetWindowTextA
EnumThreadWindows
GetFocus
InvalidateRect
EqualRect
GetScrollInfo
SetWindowTextA
LoadCursorA
CreateWindowExA
CallWindowProcA
GetDC
LoadIconA
SetRect

ole32

CLSIDFromProgID
CoGetMalloc
PropVariantClear
StringFromCLSID
ProgIDFromCLSID
StgCreateDocfileOnILockBytes
StringFromIID
CreateBindCtx
CoInitialize
CoUninitialize
CreateILockBytesOnHGlobal
IsAccelerator
IIDFromString
CoGetInterfaceAndReleaseStream
CoRegisterMessageFilter

advapi32

DeregisterEventSource
RevertToSelf
DeleteService
RegSetValueExW
AdjustTokenPrivileges
InitializeAcl
RegEnumKeyA
LookupPrivilegeValueA
SetSecurityDescriptorDacl
RegDeleteKeyW
RegQueryValueExA

comctl32

ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_LoadImageA
ImageList_Add
CreatePropertySheetPageA
InitCommonControls
ImageList_GetImageCount
CreateToolbarEx
ImageList_Create

gdi32

CreateCompatibleBitmap
GetCurrentObject
LineDDA
SetMapperFlags
ExtFloodFill
EnumFontFamiliesExW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3872d1720295f6c6584ca4756304e887

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

ole32

advapi32

comctl32

gdi32

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 63KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 63KB

.rsrc
Size: 8KB - Virtual size: 8KB