9c398576710caca3a986cbd393fe02d377996e4a65753fdbe3ce62410b94812e

Sharing

Copy URL Twitter E-mail

General

Target

9c398576710caca3a986cbd393fe02d377996e4a65753fdbe3ce62410b94812e
Size

110KB
MD5

cebc2be602c35ead72f045c311935333
SHA1

01c77b24b4302fc968ac7314c79692a0ff04c552
SHA256

9c398576710caca3a986cbd393fe02d377996e4a65753fdbe3ce62410b94812e
SHA512

7bb70bcb6bede15f1ad3d4621f4605693503cabc7771699dd4ce7827d279439fed71e9c0139dae55ba237f4c6f7aae9da1b305ca7eb173d9123d226528efc3f5
SSDEEP

1536:jdezQDl2Qxcdn++X/t3lUzfLH3SR1MnEgfglWN/tkXvevUBUmwwy:ReAl2Qxcx/XUzW1MnEJle/ESrmM

Score

N/A

Malware Config

Signatures

Files

9c398576710caca3a986cbd393fe02d377996e4a65753fdbe3ce62410b94812e
.exe windows x86

806b56e08a2326f131db86ab3748561c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA
RegQueryInfoKeyA
RegEnumKeyExA
GetLengthSid

kernel32

GetCommandLineA
GetModuleHandleA
VirtualAllocEx
ExitProcess
LoadLibraryExA

comdlg32

FindTextA

ole32

GetHGlobalFromStream
CoCreateInstanceEx
StgOpenStorage
CoUnmarshalInterface
MkParseDisplayName
CoReleaseMarshalData
StringFromIID
CoCreateFreeThreadedMarshaler

shlwapi

SHQueryInfoKeyA
SHGetValueA
PathGetCharTypeA

version

VerQueryValueA
VerInstallFileA
GetFileVersionInfoA

shell32

DragQueryFileA
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetFileInfoA

user32

GetSysColor
GetMenu
GetCursor
GetKeyNameTextA
GetKeyState
GetCapture
DrawIcon
SetCursor
BeginPaint
GetPropA
GetIconInfo
SetWindowTextA
CreateWindowExA
GetDlgItem
EnableWindow
CharNextA
CallNextHookEx
DrawMenuBar
GetScrollInfo
CharToOemA
GetWindow
EnableScrollBar
CheckMenuItem
GetFocus
GetSysColorBrush
GetDC
GetSubMenu
CharLowerA
FrameRect
GetMenuStringA
GetWindowTextA
GetClassLongA
DrawEdge
EqualRect
CreateIcon
RegisterClassA
GetMenuItemCount
IsWindowVisible
EnableMenuItem
FillRect
GetCursorPos
EndPaint
SystemParametersInfoA
FindWindowA
CreatePopupMenu
GetMenuItemInfoA
GetDesktopWindow
IsChild
DispatchMessageA
GetScrollRange
EnumThreadWindows
GetMenuItemID
MessageBoxA
GetActiveWindow
DrawFrameControl
EnumWindows
IsDialogMessageA
TrackPopupMenu
DispatchMessageW
GetClipboardData
GetScrollPos
DefMDIChildProcA
DefWindowProcA
GetParent
BeginDeferWindowPos
DrawIconEx
EndDeferWindowPos

gdi32

BitBlt
CreateBrushIndirect
GetDCOrgEx
LineTo
CreatePenIndirect

msvcrt

wcschr
exp
tolower
memcpy
memmove
strncmp
_acmdln
log10

comctl32

ImageList_DragShowNolock
ImageList_Create
ImageList_Write
ImageList_Destroy
ImageList_Read
ImageList_Draw
ImageList_Remove
ImageList_DrawEx

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

806b56e08a2326f131db86ab3748561c

Headers

File Characteristics

Imports

advapi32

kernel32

comdlg32

ole32

shlwapi

version

shell32

user32

gdi32

msvcrt

comctl32

Sections

.text Size: 48KB - Virtual size: 48KB

.bss Size: 3KB - Virtual size: 3KB

.idata Size: 57KB - Virtual size: 57KB

.text
Size: 48KB - Virtual size: 48KB

.bss
Size: 3KB - Virtual size: 3KB

.idata
Size: 57KB - Virtual size: 57KB