98d11e664b663e83024e75a2c301cd66e0ec97b181ab0ab9ba4926d62e341b15

Sharing

Copy URL

Twitter E-mail

General

Target

98d11e664b663e83024e75a2c301cd66e0ec97b181ab0ab9ba4926d62e341b15
Size

156KB
MD5

1b96e05bd795477e16eb23cfe0936b80
SHA1

91e7be971a3a8f1abef27806d4fcb2c0a972cf8a
SHA256

98d11e664b663e83024e75a2c301cd66e0ec97b181ab0ab9ba4926d62e341b15
SHA512

35d81acfeb56a1e7c63f45e2350ece8fe422355e9f418ab6545d718ed16787f99681f23758ee5bbe850cb0858eeeffb9382456600d633ce29710cf0edb704dc6
SSDEEP

3072:ndQL9xbPhq/qZOOD3aC1boA7QvIqRnwCf/Db40F:nd+bPhq/qJD3aC1boAwIYnwcbF

Score

N/A

Malware Config

Signatures

Files

98d11e664b663e83024e75a2c301cd66e0ec97b181ab0ab9ba4926d62e341b15
.exe windows x86

ad96f0288e87efa418391452f729c31c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
ChooseFontW
CommDlgExtendedError
GetOpenFileNameA
PrintDlgExW
GetOpenFileNameW

user32

GetDesktopWindow
IsCharLowerA
InvalidateRgn
GetSubMenu
GetFocus

kernel32

GlobalAddAtomW
GetSystemWindowsDirectoryA
OpenSemaphoreW
LocalAlloc
IsBadStringPtrW
GetFullPathNameA
TryEnterCriticalSection
FindCloseChangeNotification
MultiByteToWideChar
GetCurrentThreadId
AreFileApisANSI
GetHandleInformation
UnmapViewOfFile
GetVersion
TransactNamedPipe
SetCommTimeouts
AddAtomA
GetExitCodeThread
CreateDirectoryW
FormatMessageW
ReadFile
LocalUnlock
QueryPerformanceCounter
TlsSetValue
GetLocaleInfoA
GetBinaryTypeW
FormatMessageA
ResumeThread
InitializeCriticalSection
Sleep
FlushFileBuffers
SizeofResource
ReleaseSemaphore
GetModuleFileNameW
SetCommBreak
HeapReAlloc
OpenFileMappingW
IsValidLanguageGroup
LockFile
HeapLock
SetLocalTime
lstrcpyW
GlobalFree
VerifyVersionInfoW
GlobalDeleteAtom
GetThreadContext
SetSystemTimeAdjustment
SetNamedPipeHandleState
RtlUnwind
GetShortPathNameW
SetHandleInformation
GetTimeZoneInformation
GetFileAttributesExA
GetCurrentDirectoryW
CreateNamedPipeA
OpenFileMappingA
GetDateFormatW
WaitForMultipleObjectsEx
FileTimeToSystemTime
EnumResourceLanguagesA
GetLocaleInfoW
GetSystemTimeAdjustment
FlushViewOfFile

comctl32

ImageList_GetIconSize
PropertySheetW
CreateToolbarEx
ImageList_Read
ImageList_Destroy
ImageList_Draw
ImageList_AddMasked
DestroyPropertySheetPage
ImageList_Remove

Exports

Exports

?BreadA@@YGXK@Z

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad96f0288e87efa418391452f729c31c

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

comctl32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.data Size: 512B - Virtual size: 90B

.data Size: 1024B - Virtual size: 681B

.data Size: 19KB - Virtual size: 19KB

.data Size: 6KB - Virtual size: 5KB

.data Size: 61KB - Virtual size: 60KB

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 52KB

.data
Size: 512B - Virtual size: 90B

.data
Size: 1024B - Virtual size: 681B

.data
Size: 19KB - Virtual size: 19KB

.data
Size: 6KB - Virtual size: 5KB

.data
Size: 61KB - Virtual size: 60KB

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 1KB - Virtual size: 1KB