176c4d11937162dcebe46d63b730543a813bca3abe21b0ddac3f6f4f9b5bb3eb

General

Target

176c4d11937162dcebe46d63b730543a813bca3abe21b0ddac3f6f4f9b5bb3eb
Size

165KB
MD5

8bb445be0468eb3ca7bcc28ac3d1afb0
SHA1

61e08859b2d98daebaa82168275d60e288565305
SHA256

176c4d11937162dcebe46d63b730543a813bca3abe21b0ddac3f6f4f9b5bb3eb
SHA512

0a6607369fe05f1180334ab88b40e38c865172ed713da680edd8bd5ae6a5861f212734c0d8ab7cd4b9d2508828ddf4e5c1d839c6fc697f5fb731ca7457db1d28
SSDEEP

3072:RWTBvKWLbGQPrGqAPCum9knrxarRPHwb2Bvt7MRLVSgFVgLuc/1FMgMK6c94B:+zXPxv+rxWXt7MRLgAVgqcgN

Score

N/A

Malware Config

Signatures

Files

176c4d11937162dcebe46d63b730543a813bca3abe21b0ddac3f6f4f9b5bb3eb
.dll windows x86

5f6cce62eadeea259fb50d1fbaa7ef67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetVersionExW
GetPrivateProfileSectionW
lstrcmpW
GetLastError
LoadLibraryA
GetCurrentProcess
lstrcmpiW
GetModuleHandleW
FindNextFileW
FindFirstFileW
SetFileAttributesW

user32

GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow

gdi32

DeleteObject

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA

gdiplus

GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits

ole32

CoFreeUnusedLibraries
CoDeactivateObject
CoDisconnectObject
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f6cce62eadeea259fb50d1fbaa7ef67

Headers

File Characteristics

Imports

shell32

kernel32

user32

gdi32

advapi32

gdiplus

ole32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 53KB - Virtual size: 52KB

.reloc Size: 512B - Virtual size: 302B

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 53KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 302B