9a1dc37e74d1784b82433cba1215481914d9bfa623d1bcee3243b7d71ef00976

Sharing

Copy URL Twitter E-mail

General

Target

9a1dc37e74d1784b82433cba1215481914d9bfa623d1bcee3243b7d71ef00976
Size

208KB
MD5

4d3bc9c20d36d94c74b1d5f300691a50
SHA1

ded2992f3667c30120f3b4bc3deb9d87ac7d1558
SHA256

9a1dc37e74d1784b82433cba1215481914d9bfa623d1bcee3243b7d71ef00976
SHA512

21239ecd7c5df928f0dd5863043b43a7a1f5e72db7091443bc1d237ea03caee59ccba0c1fd2e64ec4ee89c43ec4f9987fabb9e5269e7ff7f7f758f548e7494d1
SSDEEP

6144:hRrq5xJR5yLyYUC1HcypSRDdzyuKMAsn8:hRu5PmyYUyHccSRD4LMAs

Score

N/A

Malware Config

Signatures

Files

9a1dc37e74d1784b82433cba1215481914d9bfa623d1bcee3243b7d71ef00976
.exe windows x86

38465c6b5b05236f8a6d6a21b0876883

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA
PathIsContentTypeA
SHGetValueA
PathGetCharTypeA
PathFileExistsA
SHStrDupA
SHDeleteKeyA

comctl32

ImageList_Draw

advapi32

RegDeleteValueA

oleaut32

RegisterTypeLib
VariantCopyInd
SafeArrayCreate
SysFreeString
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayPtrOfIndex
VariantChangeType

kernel32

VirtualFree
GetCommandLineW
WriteFile
WideCharToMultiByte
IsBadReadPtr
ExitThread
LoadLibraryA
GetProcAddress
lstrlenA
LoadLibraryExA
GetModuleHandleA
IsBadHugeReadPtr
VirtualAlloc
GetACP
VirtualQuery
LocalAlloc
ExitProcess
lstrcpyA
WaitForSingleObject

version

VerQueryValueA
GetFileVersionInfoA
VerFindFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

user32

GetMenuItemID
GetScrollInfo

gdi32

BitBlt
RestoreDC
GetDCOrgEx
GetCurrentPositionEx
GetDIBits
CreateFontIndirectA
SetBkMode
GetDIBColorTable

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHFileOperationA

msvcrt

log
strncmp
memcmp

ole32

GetHGlobalFromStream
CreateStreamOnHGlobal
CoFreeUnusedLibraries
CoTaskMemFree

comdlg32

GetSaveFileNameA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 4KB - Virtual size: 865B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38465c6b5b05236f8a6d6a21b0876883

Headers

File Characteristics

Imports

shlwapi

comctl32

advapi32

oleaut32

kernel32

version

user32

gdi32

shell32

msvcrt

ole32

comdlg32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 132KB - Virtual size: 225KB

.hdata Size: 4KB - Virtual size: 865B

DATA Size: 8KB - Virtual size: 7KB

.adata Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 832B

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 132KB - Virtual size: 225KB

.hdata
Size: 4KB - Virtual size: 865B

DATA
Size: 8KB - Virtual size: 7KB

.adata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 832B