0feae6a41b377c6f43f2f1a9e9341f5c0582817861fcce4ed37f03253d062d11

Sharing

Copy URL Twitter E-mail

General

Target

0feae6a41b377c6f43f2f1a9e9341f5c0582817861fcce4ed37f03253d062d11
Size

240KB
MD5

ea78f96313489e15e4922d6825d74f2f
SHA1

16a484a208f116ad3c099b17a7fc7be3c65acd46
SHA256

0feae6a41b377c6f43f2f1a9e9341f5c0582817861fcce4ed37f03253d062d11
SHA512

2308d9d890f47c50c1cd9ade28c1fcf4ddd9971ccaa8d43f1f9aa5ada89d88a3bc7b7cfe16de82161db15004951859a9710deb3ce317580fdd670af1a8ad2843
SSDEEP

6144:UIxitZ6BJcLTxAiVDZMoBd+DCtTotHIlw8tdk:nxgZ6BJcPx7VlMad+DCtTotHOw8tdk

Score

N/A

Malware Config

Signatures

Files

0feae6a41b377c6f43f2f1a9e9341f5c0582817861fcce4ed37f03253d062d11
.exe windows x86

f11a05e8c611865435e384e93cb4e95e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetEnhMetaFileHeader
CreateBitmap
GetSystemPaletteEntries
SetWinMetaFileBits
GetCurrentPositionEx
SetROP2
ExcludeClipRect
SetBkColor
CreateSolidBrush
GetDIBits
CreateDIBSection
GetPaletteEntries
IntersectClipRect
GetObjectA
SetPixel
SetViewportOrgEx
RectVisible
LineTo
SaveDC
MaskBlt
CreateDIBitmap
GetWindowOrgEx
CreateFontIndirectA
SetViewportExtEx
PolyPolyline
SetWindowOrgEx
SetBrushOrgEx
GetDeviceCaps
GetBrushOrgEx
GetDCOrgEx
RealizePalette
SetBkMode
BitBlt
SetEnhMetaFileBits
CreateHalftonePalette
GetEnhMetaFileBits
GetTextMetricsA
GetClipBox
CreateCompatibleDC
ExtCreatePen
SelectClipRgn
GetWinMetaFileBits

kernel32

GetCommandLineA
GetProcAddress
VirtualAlloc
GetTempPathW
FormatMessageW
QueryPerformanceCounter
GetModuleHandleA
GetCurrentProcessId
lstrcpyW
VirtualFree
lstrcpynW
UnhandledExceptionFilter
FileTimeToSystemTime
lstrlenW
CloseHandle
LocalFree
GetLastError
GetCurrentProcess
FreeLibrary
GetFullPathNameW
GetSystemTimeAsFileTime
ExitProcess
LoadLibraryW
GetTickCount

comctl32

ImageList_Destroy
ord17

shell32

Shell_NotifyIconA
CommandLineToArgvW

advapi32

RegOpenKeyA
RegQueryValueA
RegCloseKey

msvcrt

_wcsnicmp
_controlfp
_wcsicmp
fclose
__set_app_type
wcscat
_except_handler3
__wgetmainargs
_initterm
_adjust_fdiv
fwprintf
__winitenv
__p__commode
_XcptFilter
wcscmp
_c_exit
_cexit
wcsrchr
_exit
wcschr
__p__fmode
exit

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f11a05e8c611865435e384e93cb4e95e

Headers

File Characteristics

Imports

gdi32

kernel32

comctl32

shell32

advapi32

msvcrt

Sections

.text Size: 204KB - Virtual size: 204KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 204KB - Virtual size: 204KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 13KB - Virtual size: 13KB