8b1d88e5e9d896ae4dac5470e403c40fb581c07287f0b7ed30e38260fc409fe1

Sharing

Copy URL Twitter E-mail

General

Target

8b1d88e5e9d896ae4dac5470e403c40fb581c07287f0b7ed30e38260fc409fe1
Size

105KB
MD5

1030a9a7a8f7ba7d4da7bdd17637bed4
SHA1

e6dfafde8918db955ef43b5893c4556299510597
SHA256

8b1d88e5e9d896ae4dac5470e403c40fb581c07287f0b7ed30e38260fc409fe1
SHA512

1037f4f442cc07af2bef174626ed2cbafac4fb0e390b0d270e3954f66aa8440e55dda425da1d8bbb76aadfb66646e9a96e9b75604ade0eb391a8d653f337c37b
SSDEEP

1536:lY2T34YfrCmQsHU6k0OP1+CFIP8Tzj3KOPg+x99UiMYawuAIw2VaVk4Xj0uYD1mT:lBjd8oU62PTvnb4o93jyw+IBi1X3sL

Score

N/A

Malware Config

Signatures

Files

8b1d88e5e9d896ae4dac5470e403c40fb581c07287f0b7ed30e38260fc409fe1
.exe windows x86

42c1d34cd88262da44b84a101993ff55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseColorA

msvcrt

__p__commode
_exit
_XcptFilter
strncpy
_acmdln
__setusermatherr
__p__fmode
fflush
__getmainargs
_write
free
strcmp
fopen
calloc
_except_handler3
strstr
_setmode
exit
_initterm
__set_app_type
atan
_stricmp
_adjust_fdiv
printf

kernel32

GetStartupInfoA
GetWindowsDirectoryA
GetUserDefaultLangID
GetEnvironmentVariableA

advapi32

CryptHashData
RegDeleteValueW
AllocateAndInitializeSid
OpenServiceW
GetTokenInformation

ole32

CreateItemMoniker
OleRun
CoCreateGuid
OleIsCurrentClipboard
CoUninitialize
OleSetClipboard
RegisterDragDrop
OleGetClipboard

gdi32

GetStretchBltMode
CreateCompatibleDC
GetPixel
CombineRgn
ScaleViewportExtEx
GetMapMode
EnumFontFamiliesExA
GetCharacterPlacementA
SetBkMode

user32

SetWindowPlacement
InflateRect
GetClientRect
CreatePopupMenu
IntersectRect
InvalidateRect
IsWindowVisible
SendDlgItemMessageA

comctl32

ImageList_AddMasked
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_Draw
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_EndDrag
ImageList_SetBkColor
ImageList_SetOverlayImage

oleaut32

SafeArrayGetUBound
GetActiveObject
SafeArrayRedim
SysStringLen
VariantClear

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListA
SHCreateDirectoryExW
SHGetFolderPathW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42c1d34cd88262da44b84a101993ff55

Headers

File Characteristics

Imports

comdlg32

msvcrt

kernel32

advapi32

ole32

gdi32

user32

comctl32

oleaut32

shell32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 62KB

.rsrc Size: 30KB - Virtual size: 29KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 62KB

.rsrc
Size: 30KB - Virtual size: 29KB