a72e2f3acd84d59f554e0c5fa54220b95b8cbd00c9b245b8a4063164c90b6eaa

Sharing

Copy URL

Twitter E-mail

General

Target

a72e2f3acd84d59f554e0c5fa54220b95b8cbd00c9b245b8a4063164c90b6eaa
Size

1.2MB
MD5

b01f87216c1bb30a094967f9f472da6d
SHA1

0eaef403f0229b88c1248ed2b5d2d528f8eed965
SHA256

a72e2f3acd84d59f554e0c5fa54220b95b8cbd00c9b245b8a4063164c90b6eaa
SHA512

b3bc5fbf3eb00bb8a9f019c12a4296f8f83b3f5f04acc40e5ea10f7b853a0bfe521a695826d79a1f2edad14cece6bcb4ec06d00a2f504e86d71ad24cc41a2a8b
SSDEEP

24576:8oirm3kgEsEwukmmF31DfG7qGu3r0IIxABX93AsXmOjOY:8Nq3lXulK31oqTrDIOXRATOjO

Score

N/A

Malware Config

Signatures

Files

a72e2f3acd84d59f554e0c5fa54220b95b8cbd00c9b245b8a4063164c90b6eaa
.exe windows x86

ecb594f01c83d6ef63dd7ad28177e8c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FindClose
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

TranslateMDISysAccel

advapi32

RegQueryValueExA

oleaut32

SafeArrayCreate

version

GetFileVersionInfoA

gdi32

CreateCompatibleDC

ole32

CoTaskMemFree

comctl32

ImageList_GetDragImage

comdlg32

GetOpenFileNameA

skin/skinh_dl

SkinH_Attach

qtintf70

_QWidget_setFocus

Sections

CODE
Size: - Virtual size: 826KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp2
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecb594f01c83d6ef63dd7ad28177e8c6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

comdlg32

skin/skinh_dl

qtintf70

Sections

CODE Size: - Virtual size: 826KB

DATA Size: - Virtual size: 14KB

BSS Size: - Virtual size: 4KB

.idata Size: - Virtual size: 20KB

.tls Size: - Virtual size: 16B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 58KB

.rsrc Size: 70KB - Virtual size: 245KB

.vmp1 Size: - Virtual size: 526KB

.vmp2 Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 512B - Virtual size: 184B

CODE
Size: - Virtual size: 826KB

DATA
Size: - Virtual size: 14KB

BSS
Size: - Virtual size: 4KB

.idata
Size: - Virtual size: 20KB

.tls
Size: - Virtual size: 16B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 58KB

.rsrc
Size: 70KB - Virtual size: 245KB

.vmp1
Size: - Virtual size: 526KB

.vmp2
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 512B - Virtual size: 184B