d02dca91ea361ebf228856e4bd705fb75cfe6ac5802f1b71e76519916e718fd7

Sharing

Copy URL Twitter E-mail

General

Target

d02dca91ea361ebf228856e4bd705fb75cfe6ac5802f1b71e76519916e718fd7
Size

204KB
MD5

66423ff395e0c9e92549b588d585adbf
SHA1

181f22797cd41c32d64cbc6f7e180bcae41b2fc4
SHA256

d02dca91ea361ebf228856e4bd705fb75cfe6ac5802f1b71e76519916e718fd7
SHA512

bcdd6e0ff13e766b7daca77aeaf9168122a8a423823e57c9c80305c6745f4f97450afefd82342d83f3861de28c46a580ac27ac1ed00d79067b030613f69be7f0
SSDEEP

3072:76lkwlFmYpmUGeqnDzD8XPWPY34IHBk88H2dMhD44hYQqH/t58Mma5h0:ckKmWJNqDzDMPow40knYakY7qf++h

Score

N/A

Malware Config

Signatures

Files

d02dca91ea361ebf228856e4bd705fb75cfe6ac5802f1b71e76519916e718fd7
.exe windows x86

9c349ba406a03a6a39261208cba6d10c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA
RegDeleteKeyA

comctl32

ImageList_Read
ImageList_Add
ImageList_Create
ImageList_GetBkColor
ImageList_Draw
ImageList_DragShowNolock
ImageList_Remove

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
SHGetFolderPathA
SHGetFileInfoA

oleaut32

OleLoadPicture
RegisterTypeLib
VariantCopyInd
SysStringLen
SysAllocStringLen
SafeArrayGetElement

kernel32

CreateThread
GetCommandLineW
lstrlenA
CreateFileA
GetCommandLineA
Sleep
LoadLibraryA
GetProcAddress
VirtualAlloc
ExitThread
DeleteFileA
CreateEventA
EnterCriticalSection
LoadLibraryExA
IsBadReadPtr
CompareStringA
GetModuleHandleA
GetLastError
GetModuleHandleW
CloseHandle
DeleteCriticalSection
ExitProcess

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 475B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 8KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c349ba406a03a6a39261208cba6d10c

Headers

File Characteristics

Imports

advapi32

comctl32

shell32

oleaut32

kernel32

Sections

.text Size: 172KB - Virtual size: 168KB

.rdata Size: 4KB - Virtual size: 758B

.data Size: 4KB - Virtual size: 475B

DATA Size: 4KB - Virtual size: 448B

.adata Size: 8KB - Virtual size: 51KB

.gdata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 836B

.text
Size: 172KB - Virtual size: 168KB

.rdata
Size: 4KB - Virtual size: 758B

.data
Size: 4KB - Virtual size: 475B

DATA
Size: 4KB - Virtual size: 448B

.adata
Size: 8KB - Virtual size: 51KB

.gdata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 836B