171e3b4a1923fb8da7cd93da094755970f68aa3181401e268a2c22adbf6fd813

Sharing

Copy URL Twitter E-mail

General

Target

171e3b4a1923fb8da7cd93da094755970f68aa3181401e268a2c22adbf6fd813
Size

98KB
MD5

5d30e7a36eb0ebd4485cd56a0e2dd4ae
SHA1

df5ed5152bcdcdd2d2d7fdd10cdae2010a31ea2c
SHA256

171e3b4a1923fb8da7cd93da094755970f68aa3181401e268a2c22adbf6fd813
SHA512

f354ac32148e4c59c4d7a03664cbb34c6a4f1b25343388ddc02016258c1902f312b33a7fee0cc58056bee523c7f27f48a4d19f19e081b4b304753f53596f8bc3
SSDEEP

3072:MPg993TiqpCet0vo9t76oXaSTzVcAHAaG5UX4:MP09ZTHXDTzVtgm

Score

N/A

Malware Config

Signatures

Files

171e3b4a1923fb8da7cd93da094755970f68aa3181401e268a2c22adbf6fd813
.exe windows x86

94e7a9a4f7b2dc9462fcc76dde828401

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

PropertySheetW
ord15
PropertySheetA
ord5
CreateStatusWindowW
ord8
FlatSB_SetScrollProp
FlatSB_GetScrollProp
UninitializeFlatSB
FlatSB_SetScrollInfo
ord6
FlatSB_SetScrollPos
InitCommonControlsEx
FlatSB_EnableScrollBar
ord2
ord17
CreateToolbarEx
CreatePropertySheetPageA

shlwapi

StrChrIW
StrCmpNA

kernel32

HeapLock
GetOverlappedResult
GetModuleHandleA
GetProcAddress
GetCommandLineA
VirtualAllocEx
GetTickCount
LocalFree
GetCurrentProcessId
GetCurrentProcess
DeleteFileA
GetHandleInformation
OpenEventA
GetProcessHeap
CopyFileA
GetExitCodeThread
GetModuleFileNameA
QueryPerformanceCounter
LocalReAlloc
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetEndOfFile
LCMapStringA
LCMapStringW

uxtheme

GetThemeSysColorBrush

comdlg32

ChooseColorW
FindTextA
ReplaceTextW
GetOpenFileNameA
GetFileTitleW
PageSetupDlgW
PrintDlgW
ChooseColorA
CommDlgExtendedError
ChooseFontA
ReplaceTextA
ChooseFontW
PageSetupDlgA
GetOpenFileNameW
PrintDlgA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94e7a9a4f7b2dc9462fcc76dde828401

Headers

File Characteristics

Imports

comctl32

shlwapi

kernel32

uxtheme

comdlg32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 13KB

.rsrc Size: 42KB - Virtual size: 42KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 13KB

.rsrc
Size: 42KB - Virtual size: 42KB

.reloc
Size: 4KB - Virtual size: 3KB