3c6886d404931b65e8c2c418895b54de14735fa7958257456ee2aaef35509c0a

Sharing

Copy URL Twitter E-mail

General

Target

3c6886d404931b65e8c2c418895b54de14735fa7958257456ee2aaef35509c0a
Size

144KB
MD5

82e5040646ef561297545d5f771dd4c3
SHA1

164460b8ebd9116149f6e4b9be68444130d43d82
SHA256

3c6886d404931b65e8c2c418895b54de14735fa7958257456ee2aaef35509c0a
SHA512

d9057bdc26807dee6002fc7f733c96898893b6dc92363348c7ee0bab988f1705518e1dca7748e3fc0728755165ddaae31f5af415ac82a024cd721f781c174661
SSDEEP

3072:JM3od6WgsPWX4zrU7zbSpoxEnzXsRvSAKmtLskfbSR:K3iWGgvb+2Enz8cA3Ls6I

Score

N/A

Malware Config

Signatures

Files

3c6886d404931b65e8c2c418895b54de14735fa7958257456ee2aaef35509c0a
.exe windows x86

9718d9e9ad8e27947d39482aaa3355c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCommonPrefixW
StrFromTimeIntervalW
StrCmpW
PathCombineW
StrToIntExW
StrStrIW

shell32

ord147

kernel32

OpenEventA
FileTimeToDosDateTime
GetCommState
GetVersionExW
EnumResourceLanguagesA
lstrcmpW
GetFileAttributesA
FindClose
GetFileType
LockResource
SetCommMask
CreateWaitableTimerW
LoadLibraryExW
ClearCommError
lstrcpyW
OpenSemaphoreW
GetNamedPipeInfo
CreateEventA
LoadLibraryW
GetHandleInformation

user32

EnumDisplaySettingsExW
GetLastActivePopup
SetActiveWindow
ScreenToClient
GetSystemMenu
GetNextDlgGroupItem
GetDlgItemInt
SendNotifyMessageW
UnloadKeyboardLayout
GetScrollRange
GetDC
DrawFocusRect
ScrollDC
GetKeyboardLayout
LoadMenuW
DestroyCursor
EnumPropsExW
SetMenu
DrawMenuBar
SetCaretBlinkTime
AdjustWindowRect
MessageBoxExW
DefWindowProcW
DefFrameProcW
GetWindow
SendMessageTimeoutW

gdi32

LPtoDP
GetEnhMetaFileDescriptionW
GetRandomRgn
CloseMetaFile
GetTextFaceW
SaveDC
GetCharABCWidthsW
GetTextExtentExPointW
CreateCompatibleDC
GetMetaFileBitsEx
FillPath
SetStretchBltMode
UpdateColors

advapi32

SetAclInformation
AddAuditAccessAceEx

Exports

Exports

__SetMenuContextHelpId@12

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ex_dat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.i_text
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mem_0
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mconst
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat_s
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9718d9e9ad8e27947d39482aaa3355c2

Headers

File Characteristics

Imports

shlwapi

shell32

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.ex_dat Size: 2KB - Virtual size: 1KB

.i_text Size: 1024B - Virtual size: 640B

.data Size: 512B - Virtual size: 488B

.mem_0 Size: 512B - Virtual size: 44B

.mconst Size: 512B - Virtual size: 64B

.dat_s Size: 3KB - Virtual size: 3KB

.rsrc Size: 128KB - Virtual size: 128KB

.reloc Size: 1024B - Virtual size: 890B

.text
Size: 8KB - Virtual size: 8KB

.ex_dat
Size: 2KB - Virtual size: 1KB

.i_text
Size: 1024B - Virtual size: 640B

.data
Size: 512B - Virtual size: 488B

.mem_0
Size: 512B - Virtual size: 44B

.mconst
Size: 512B - Virtual size: 64B

.dat_s
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 128KB - Virtual size: 128KB

.reloc
Size: 1024B - Virtual size: 890B