6fa2fc8969ad57272ee2214d0b7db63db92e47fae5f9ed9538634c5b99915740

Sharing

Copy URL Twitter E-mail

General

Target

6fa2fc8969ad57272ee2214d0b7db63db92e47fae5f9ed9538634c5b99915740
Size

307KB
MD5

7c69c2a648a9c2c74dde40360616330d
SHA1

609bb42d49aba7bd82d5fac86ebbf459fa853da4
SHA256

6fa2fc8969ad57272ee2214d0b7db63db92e47fae5f9ed9538634c5b99915740
SHA512

fe880c900ab8be7e259e6beb4b3268d3e2cd8a9f2ca201646ac63917f7d315b148bec6436c7d7f33a07746317c7ec6a6953e18e293825a41e6d8a0e590f65741
SSDEEP

6144:Ww9++bLjS10iDOEhAOlj/uuJudyHj+VABWviGvQx:XvS6iDPNptyVAmQx

Score

N/A

Malware Config

Signatures

Files

6fa2fc8969ad57272ee2214d0b7db63db92e47fae5f9ed9538634c5b99915740
.exe windows x86

f3e899f66e75e71255e8b5a50d9ac7f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
lstrlenW
LeaveCriticalSection
GetProcessHeap
DeleteCriticalSection
CloseHandle
EnterCriticalSection
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetFileInformationByHandle
LockResource
FindResourceW
RaiseException
GetCurrentThreadId
HeapSize
CompareFileTime
IsProcessorFeaturePresent
SizeofResource
HeapFree
LoadResource
GetSystemTimeAsFileTime
FindResourceExW
HeapDestroy
SwitchToThread
HeapReAlloc
IsDebuggerPresent
CreateFileW
VirtualAlloc

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW

oleaut32

VariantInit
SysAllocStringLen
UnRegisterTypeLi
VariantClear
VarBstrCmp
VariantChangeType
SysStringLen
SysStringByteLen
SafeArrayLock
LoadRegTypeLi
VarBstrCat
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayDestroy
RegisterTypeLi
SafeArrayGetUBound
SysAllocString
SafeArrayGetLBound
SysFreeString
SafeArrayGetVartype
VarBstrFromDec
SetErrorInfo

user32

CharNextW
RegisterWindowMessageW
GetDC
CharPrevA
MessageBoxIndirectW
DestroyCursor
GetMessageA
GetScrollPos
LoadImageW
wsprintfA
WaitForInputIdle
wvsprintfW
LoadIconA
LoadMenuA
PostMessageW
EnumWindows
TrackPopupMenuEx
GetMenuItemRect

ole32

IIDFromString
StringFromGUID2
CLSIDFromString
CoCreateInstance

gdi32

GetLayout

shimeng

SE_DllUnloaded
SE_ProcessDying
SE_DynamicShim
SE_InstallBeforeInit

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 269KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3e899f66e75e71255e8b5a50d9ac7f3

Headers

File Characteristics

Imports

kernel32

advapi32

oleaut32

user32

ole32

gdi32

shimeng

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 269KB - Virtual size: 400KB

.rdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 17KB - Virtual size: 26KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 269KB - Virtual size: 400KB

.rdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 17KB - Virtual size: 26KB