5c93be57c35fc20fc2ada60fdad0aa66bf63b6a961b4cf959fed19c7e0b8dca8

Sharing

Copy URL Twitter E-mail

General

Target

5c93be57c35fc20fc2ada60fdad0aa66bf63b6a961b4cf959fed19c7e0b8dca8
Size

82KB
MD5

1ce276e172fec460da8ba5dd635a1d6d
SHA1

0315da8a3e996669a207eec8344c899840cd90ed
SHA256

5c93be57c35fc20fc2ada60fdad0aa66bf63b6a961b4cf959fed19c7e0b8dca8
SHA512

a98fcaa7a13737f42839f8392da28dc20c62a25261cfa3632ccfc7e5ffa9d2ce5a1c9b750b1d364e0fd1e4cb78e064f01e1e6eb2801ed76031e2ffd3c64f1500
SSDEEP

1536:bRXRZez+MmZew3QHQWJF+mQABqh3CiI9XbUWJozD0qCfVzUXBZTj6jK1+Ml6rxVw:tXRZez+xZZAwWBA5YoYHyvs+N69+

Score

N/A

Malware Config

Signatures

Files

5c93be57c35fc20fc2ada60fdad0aa66bf63b6a961b4cf959fed19c7e0b8dca8
.exe windows x86

79150c9dda7d7c85719d222b1b34c1de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetProcessHeap
VirtualAlloc
GetModuleHandleW
DeviceIoControl
FreeEnvironmentStringsW
GetProcAddress
lstrlenW
RemoveDirectoryA
GetPrivateProfileStringA
IsBadCodePtr
VirtualProtectEx
GetTempPathW
GetStringTypeExA
CompareStringW
GetLocalTime
LocalFree
GetCommandLineW

msvcrt

free
_adjust_fdiv
calloc
_exit
fputc
_XcptFilter
__p___initenv
__p__commode
__setusermatherr
_initterm
strchr
_controlfp
__getmainargs
__p__fmode
realloc
_except_handler3
fputs
strncmp
_snprintf
fread
_write
__set_app_type

ole32

CoDisconnectObject
CLSIDFromString
StgCreateDocfileOnILockBytes
StringFromIID
CoReleaseMarshalData
OleSetClipboard
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemRealloc
CoGetClassObject
OleUninitialize
CoGetInterfaceAndReleaseStream

comctl32

PropertySheetA
ImageList_AddMasked
ImageList_LoadImageA
ImageList_Read
ImageList_Add
ImageList_EndDrag
ImageList_Remove
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Replace
ImageList_SetBkColor
CreateStatusWindowA
PropertySheetW
ImageList_GetBkColor
InitializeFlatSB
CreatePropertySheetPageA
ImageList_SetIconSize
ImageList_GetImageInfo

user32

DeleteMenu
InsertMenuA
SetScrollInfo
ScrollWindow
EmptyClipboard
EnumWindows
RegisterWindowMessageA
GetScrollRange
LoadBitmapA
DrawIconEx
GetMenuItemID
UnhookWindowsHookEx
SystemParametersInfoA
IsZoomed
RemoveMenu
DestroyWindow
CreatePopupMenu
GetClassNameA

gdi32

SetMetaFileBitsEx
GetRegionData
SetGraphicsMode
CreateDIBSection
CreateBitmap
CreateDIBitmap
EnumEnhMetaFile
GetEnhMetaFileHeader
GetObjectA
StartDocW

advapi32

InitializeAcl
RevertToSelf
SetSecurityDescriptorDacl
RegDeleteKeyW
GetUserNameA
RegOpenKeyA
ControlService
CheckTokenMembership
RegQueryValueExA
RegQueryInfoKeyA
RegCreateKeyA
RegEnumKeyExA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79150c9dda7d7c85719d222b1b34c1de

Headers

File Characteristics

Imports

kernel32

msvcrt

ole32

comctl32

user32

gdi32

advapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 61KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 61KB

.rsrc
Size: 5KB - Virtual size: 4KB