c6f3054376c30a4a9aeef067f669930ad6a0e3a3ee9ef0f99b610d87a9098674

Sharing

Copy URL Twitter E-mail

General

Target

c6f3054376c30a4a9aeef067f669930ad6a0e3a3ee9ef0f99b610d87a9098674
Size

148KB
MD5

2184e9fc73cdfe832525fa3cfe3b2ec0
SHA1

8e98c2340d9e91625aa7737921d0f32e16a07d85
SHA256

c6f3054376c30a4a9aeef067f669930ad6a0e3a3ee9ef0f99b610d87a9098674
SHA512

ea28986a8cce95e9318e3ac38958346a789102cfa7d84c5296fdaa316eabfcad59b1387531f710408c26496f5c52b73a93593897e228f3eb3cabe389463a04f7
SSDEEP

3072:JDGMYSNvnb+20/gaz16Joxpvy+MeIsKjbLr6AHqaZLS5d6Lvwx/l7b:R0460ECniAHq1aLvS/lv

Score

N/A

Malware Config

Signatures

Files

c6f3054376c30a4a9aeef067f669930ad6a0e3a3ee9ef0f99b610d87a9098674
.exe windows x86

193d5bdd3a1a04d8d4dc8e49fd8e3528

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__p__fmode
_except_handler3
__setusermatherr
log
_initterm
__getmainargs
wcslen
fwrite
_controlfp
_setjmp3
__p__commode
fgets
_adjust_fdiv
exit
ftell
_acmdln
_fstat
_XcptFilter
__set_app_type
_errno

kernel32

SetFileTime
GetStartupInfoA
GetCommandLineW
GetModuleHandleA
TerminateProcess
CompareStringW
lstrcpyA
CreateDirectoryA
GetSystemDirectoryA
CreateFileMappingA
IsBadCodePtr
IsValidCodePage
GetTempPathA
SetCurrentDirectoryA
VirtualProtect
WriteConsoleA

shell32

SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetFolderPathW
SHGetSpecialFolderLocation
SHAppBarMessage
SHGetDesktopFolder
DragQueryFile
SHChangeNotify
ExtractAssociatedIconW
ExtractIconExA
CommandLineToArgvW

user32

DrawMenuBar
GetMenu
GetCapture
EmptyClipboard
SetCursor
GetCursorPos
GetTopWindow
RegisterClipboardFormatA
WaitMessage
GetClientRect

gdi32

Ellipse
StartPage
GetCharWidthW
SetTextColor
GetDIBits
InvertRgn
TranslateCharsetInfo
CreateICA
SetPolyFillMode
EnumFontsA

comctl32

ImageList_Create
CreatePropertySheetPageA
InitCommonControls
ImageList_Replace
CreateToolbarEx
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Add
ImageList_Destroy

version

GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW
VerFindFileW
VerQueryValueW

oleaut32

SafeArrayPutElement
SysReAllocStringLen
SysAllocStringByteLen
GetActiveObject
SysAllocStringLen
SafeArrayCreate
SysStringLen
SysStringByteLen

advapi32

CryptCreateHash
OpenServiceW
RegDeleteKeyW
RegSetValueExA
LookupPrivilegeValueA

ole32

OleUninitialize
CoGetClassObject
CoInitializeEx
RegisterDragDrop
CoLoadLibrary

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

193d5bdd3a1a04d8d4dc8e49fd8e3528

Headers

File Characteristics

Imports

msvcrt

kernel32

shell32

user32

gdi32

comctl32

version

oleaut32

advapi32

ole32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 17KB - Virtual size: 40KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 17KB - Virtual size: 40KB

.rsrc
Size: 112KB - Virtual size: 112KB