caf5143ece6911914dddcceca753986c6a49df020e10fea73fa1489aecf87d31

Sharing

Copy URL Twitter E-mail

General

Target

caf5143ece6911914dddcceca753986c6a49df020e10fea73fa1489aecf87d31
Size

179KB
MD5

b1015adc857cd42d9baa1fe8abd71bf1
SHA1

11dd61983e39831fff9ee23adde3ad12574b0e78
SHA256

caf5143ece6911914dddcceca753986c6a49df020e10fea73fa1489aecf87d31
SHA512

aa90db24854b791479dc6fc964fe2f90b56bfc713bd21405dc9ff2c727bfc28963377549f6ac1c41a35bc7df036dc09bd24e985f0e8c5d7c9dfa3740bc5007cb
SSDEEP

3072:MRCcfK0iGLER5uGj4DfruEB0bp19AQTXIdwuD:MOlR5D4Dju9bp19AQTXIdD

Score

N/A

Malware Config

Signatures

Files

caf5143ece6911914dddcceca753986c6a49df020e10fea73fa1489aecf87d31
.exe windows x86

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Remove
ImageList_Write
ImageList_Add
ImageList_Draw
ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_Remove
ImageList_Add

advapi32

RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegLoadKeyA
RegCreateKeyA

kernel32

CreateFileA
GetFullPathNameA
ExitThread
GetModuleHandleA
ExitProcess
VirtualAlloc
ExitThread
LocalAlloc
GetModuleHandleW
IsBadReadPtr
lstrlenA
GetProcAddress
GetACP
LoadLibraryExA

msvcrt

strncmp
rand
wcstol

shlwapi

SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA
PathGetCharTypeA
SHDeleteKeyA

gdi32

CreatePalette
GetCurrentPositionEx
LineTo
CreatePenIndirect
CreateCompatibleDC

shell32

SHFileOperationA
SHGetDesktopFolder

version

VerFindFileA

oleaut32

VariantChangeType
SysReAllocStringLen
SafeArrayUnaccessData
GetErrorInfo
SysStringLen
SysAllocStringLen
VariantCopyInd
SysFreeString
SafeArrayCreate
RegisterTypeLib
VariantChangeType

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

ole32

CoCreateInstanceEx
WriteClassStm

user32

GetMenuItemCount
SetCapture

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA7
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA3
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

Imports

comctl32

advapi32

kernel32

msvcrt

shlwapi

gdi32

shell32

version

oleaut32

comdlg32

ole32

user32

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 1KB

.DATA1 Size: 2KB - Virtual size: 1KB

.DATA7 Size: 1024B - Virtual size: 867B

.DATA3 Size: 126KB - Virtual size: 125KB

.DATA9 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 1KB

.DATA1
Size: 2KB - Virtual size: 1KB

.DATA7
Size: 1024B - Virtual size: 867B

.DATA3
Size: 126KB - Virtual size: 125KB

.DATA9
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB