92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7

Sharing

Copy URL

Twitter E-mail

General

Target

92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7
Size

167KB
MD5

9fa2033f720a30059c718260a6c68189
SHA1

74b781628793a258a5fffa3c7e8b3f72c65c9316
SHA256

92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7
SHA512

a8452c8433cfef84eb2f0f1818b311a16d1574cf2ba5819e81e3c849a9a3b2a963a4f7ce7d16d5007357bdf2f32692f9798a35f74889228307a3c25051bdec76
SSDEEP

3072:ks2y0Ng43WxLp17r1c3Q1en6oYtFAFKHVIloR8Tp17r1c3Q1en6oYtFAFKm:wyagQGNRi3Q1enA78e8VRi3Q1enA7g

Score

N/A

Malware Config

Signatures

Files

92a45c5988c0454568085bd5145893a0d98c9398d533d602377931fb6ea9d0c7
.exe windows x86

0f0e2fd3d716d8e305bad486b3085788

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseColorA

msvcrt

_snprintf
_acmdln
calloc
_initterm
_write
_adjust_fdiv
fputc
strcmp
__p__commode
printf
__dllonexit
free
exit
__p__fmode
__setusermatherr
_except_handler3
strncpy
atan
__set_app_type
strchr
_XcptFilter
__getmainargs
fprintf
_iob
_exit

kernel32

GetLocalTime
GetStartupInfoA
SetStdHandle
GetThreadLocale
GetFileAttributesW
GetStartupInfoW
VirtualProtect

shell32

SHChangeNotify
ShellExecuteW
SHGetSpecialFolderLocation

advapi32

RevertToSelf
RegDeleteKeyW
FreeSid
RegOpenKeyExW
RegQueryInfoKeyA
SetSecurityDescriptorDacl
IsValidSid
RegQueryValueExA
OpenProcessToken

oleaut32

CreateErrorInfo
SysStringLen
VariantCopy
SafeArrayGetUBound
SysFreeString
SysStringByteLen
VariantInit

comctl32

ImageList_DragEnter
ImageList_SetImageCount
ImageList_Add
ImageList_Write
ImageList_Replace
InitCommonControls

ole32

CLSIDFromProgID
PropVariantClear
OleDraw
OleFlushClipboard
CoSetProxyBlanket
CreateStreamOnHGlobal
IIDFromString

gdi32

PtInRegion
GetTextExtentPoint32A
GetMetaFileBitsEx

user32

DrawTextA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f0e2fd3d716d8e305bad486b3085788

Headers

File Characteristics

Imports

comdlg32

msvcrt

kernel32

shell32

advapi32

oleaut32

comctl32

ole32

gdi32

user32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 62KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 62KB

.rsrc
Size: 31KB - Virtual size: 30KB