e7ca820a6a57ef554d548f2071328d68bc4b6f3d9ede6a9a8105a616b950299d

Sharing

Copy URL Twitter E-mail

General

Target

e7ca820a6a57ef554d548f2071328d68bc4b6f3d9ede6a9a8105a616b950299d
Size

80KB
MD5

eb8aa8980d5cc801c9f36c2fe921674e
SHA1

70b4943824432a3e8a14fa006adef45f4c6b9214
SHA256

e7ca820a6a57ef554d548f2071328d68bc4b6f3d9ede6a9a8105a616b950299d
SHA512

914adc2663c448542000385a400f2fd668eea119203d23180887be036c5728842b74353089a3933f0867bce8ab110ebe66ea919f41eaf0fe57422a3659754dea
SSDEEP

1536:19pZeTgJePO1eAZoxbeGj2xZzZloi5wPYhcxt0hKRkV1qMH8xq:Zkg1eks1j2/T+kNpcw

Score

N/A

Malware Config

Signatures

Files

e7ca820a6a57ef554d548f2071328d68bc4b6f3d9ede6a9a8105a616b950299d
.exe windows x86

1e51879f116875acc43c110bde26f8d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

SetWindowTextA
GetSysColor
SetWindowPos
PostQuitMessage
GetSubMenu
UnhookWindowsHookEx
EnableMenuItem
GetMessageA
EqualRect
EnumWindows
GetSysColorBrush
FrameRect
GetScrollPos

kernel32

VirtualAllocEx
GetSystemTime
InterlockedExchange
GetFileAttributesA
RtlUnwind
GetOEMCP
ExitProcess
GetTickCount
GetCurrentProcessId
QueryPerformanceCounter
FileTimeToSystemTime
GetACP
GetStartupInfoA
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetTempPathA

gdi32

DPtoLP
CopyEnhMetaFileA
CreateICW
GetMapMode
ExcludeClipRect
CreateCompatibleBitmap
SetViewportExtEx
SelectClipPath
FillRgn

ole32

OleRun
CoCreateInstance
StringFromGUID2
CoInitializeSecurity
DoDragDrop
CoInitialize
StgOpenStorage
CoTaskMemRealloc
CoRevokeClassObject

advapi32

CryptHashData
FreeSid
QueryServiceStatus
RegCreateKeyA
GetUserNameA
RegQueryValueExW
RegCreateKeyExW
CheckTokenMembership
GetSecurityDescriptorDacl
AdjustTokenPrivileges

msvcrt

strncpy
_mbscmp
_strdup
_CIpow
fprintf
_flsbuf
signal
__getmainargs
_lock
__initenv
__setusermatherr
raise
puts
strcspn
_fdopen
fflush
strlen
iswspace

comctl32

InitCommonControls
ImageList_SetIconSize
ImageList_Destroy
ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_Write
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_LoadImageA
ImageList_GetIcon
ImageList_LoadImageW
ImageList_DragEnter

shell32

CommandLineToArgvW
ShellExecuteW
DragAcceptFiles
ShellExecuteEx
SHBrowseForFolderA
ExtractIconW
ExtractIconExW
DoEnvironmentSubstW
DragQueryFileW
DragQueryFileA
SHGetPathFromIDList

oleaut32

SafeArrayPutElement
SafeArrayUnaccessData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayPtrOfIndex
SafeArrayGetUBound
SysReAllocStringLen

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e51879f116875acc43c110bde26f8d6

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 33KB - Virtual size: 33KB

.data Size: 40KB - Virtual size: 39KB

.rsrc Size: 6KB - Virtual size: 174KB

.text
Size: 33KB - Virtual size: 33KB

.data
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 6KB - Virtual size: 174KB