8a9c74a1204b89c9bdfa22dbbdd1e762deff54de922100daf9a1402a4ae03bf1

Sharing

Copy URL

Twitter E-mail

General

Target

8a9c74a1204b89c9bdfa22dbbdd1e762deff54de922100daf9a1402a4ae03bf1
Size

148KB
MD5

bd7aeae5237e63430a102f8a64b9f0c6
SHA1

61abbd7cc41f9160c8211b942586999442e8fc6f
SHA256

8a9c74a1204b89c9bdfa22dbbdd1e762deff54de922100daf9a1402a4ae03bf1
SHA512

52c3048d0fd4045a227ff2a12414da2a10d7f9367ce067fa80fbee650ceba995050d1ac705dc68017f5f3ab2a93695367e2a2ea87bfc9075b0bbf1e24cbb932e
SSDEEP

3072:sVMKtY64bK+6bgKt3GVNBriUYndqXZNRF6tXE4RNd2FGyEipfOU4dy:2Y64bK3AdkqJNRv8NcFHpWpd

Score

N/A

Malware Config

Signatures

Files

8a9c74a1204b89c9bdfa22dbbdd1e762deff54de922100daf9a1402a4ae03bf1
.exe windows x86

1aa97a0fc03381c0cf968931f778e712

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCanonicalizeW
StrCmpW
StrToIntA
StrStrA
StrFromTimeIntervalW
PathCommonPrefixW

shell32

ord147

kernel32

SetFilePointer
FreeResource
GetCommState
FileTimeToDosDateTime
GetHandleInformation
CreateWaitableTimerA
GetCommandLineW
QueueUserAPC
OpenMutexW
CreateFileW
LoadLibraryExW
lstrcpyW
OpenSemaphoreW
GetNamedPipeInfo
CreateEventA
LoadLibraryW
UnlockFileEx

user32

GetMenu
DrawFocusRect
GetDC
SetScrollRange
DrawTextExW
DefFrameProcA
GetTopWindow
GetMenuItemID
GetWindowDC
SendDlgItemMessageA
GetWindowRect
ScreenToClient
RemovePropW
GetDlgItemInt
ScrollDC
GetMenuState
LoadCursorFromFileW
IsWindowUnicode
EnumPropsExW
DrawMenuBar
WindowFromDC
SetMenuInfo
SetCaretBlinkTime
GetSystemMetrics
IsWindowVisible
GetCaretBlinkTime
MessageBoxExA
GetKeyboardLayoutList
DefWindowProcW
EnumDisplaySettingsW
ActivateKeyboardLayout
SetMessageExtraInfo
GetWindow
SendMessageTimeoutW

gdi32

GetEnhMetaFileDescriptionW
GetRasterizerCaps
SetROP2
ChoosePixelFormat
GetCharABCWidthsW
LPtoDP
GetGraphicsMode
CreateCompatibleDC
GetWorldTransform
SetBrushOrgEx
GetLayout
SaveDC
FillPath
GetTextExtentExPointA
UpdateColors

advapi32

AddAuditAccessAce
GetAclInformation
GetCurrentHwProfileW

Exports

Exports

__GetClientRect@12

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.exdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.secimg
Size: 1024B - Virtual size: 597B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.memo0
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c_mem
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mem0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.datse
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1aa97a0fc03381c0cf968931f778e712

Headers

File Characteristics

Imports

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.exdata Size: 2KB - Virtual size: 2KB

.secimg Size: 1024B - Virtual size: 597B

.data Size: 512B - Virtual size: 472B

.memo0 Size: 512B - Virtual size: 48B

.c_mem Size: 512B - Virtual size: 64B

.mem0 Size: 3KB - Virtual size: 2KB

.datse Size: 1024B - Virtual size: 636B

.rsrc Size: 128KB - Virtual size: 128KB

.reloc Size: 1024B - Virtual size: 952B

.text
Size: 8KB - Virtual size: 8KB

.exdata
Size: 2KB - Virtual size: 2KB

.secimg
Size: 1024B - Virtual size: 597B

.data
Size: 512B - Virtual size: 472B

.memo0
Size: 512B - Virtual size: 48B

.c_mem
Size: 512B - Virtual size: 64B

.mem0
Size: 3KB - Virtual size: 2KB

.datse
Size: 1024B - Virtual size: 636B

.rsrc
Size: 128KB - Virtual size: 128KB

.reloc
Size: 1024B - Virtual size: 952B