ed420b7c195e64cf24cb74d58545cef727a3d3f926c59d4f15fd65839c2bd339

Sharing

Copy URL Twitter E-mail

General

Target

ed420b7c195e64cf24cb74d58545cef727a3d3f926c59d4f15fd65839c2bd339
Size

81KB
MD5

6f6b8c83d9fc0b8930fbd7a9077f9589
SHA1

469ce7245afc4e22ea4def41617c571c1babd004
SHA256

ed420b7c195e64cf24cb74d58545cef727a3d3f926c59d4f15fd65839c2bd339
SHA512

ce564355ed87e47fa5a152c16b9431480cfbbf2b7d5fbacb33f3e8bc0414a87b891a203dc04a81d41aecbaa9055a9f03b9a08eae7ffb79a9a11e0ca7ba5e7327
SSDEEP

1536:rtsj41NJizx4nfo75rdzLZZ9oLi0b8HjMBJ61VpQFbL4Lcz5z:rn1Ixh757Z70b8HjMB+ULNz

Score

N/A

Malware Config

Signatures

Files

ed420b7c195e64cf24cb74d58545cef727a3d3f926c59d4f15fd65839c2bd339
.exe windows x86

fec872a9ea3b6842b198912143521fef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
free
_acmdln
_snprintf
__p__commode
__getmainargs
sqrt
_strnicmp
_XcptFilter
__set_app_type
_iob
__p__fmode
_except_handler3
_exit
_adjust_fdiv
calloc
getenv
__setusermatherr
exit
memmove
_initterm
memcpy
strcmp
__dllonexit

kernel32

VirtualProtect
ReadFile
GetSystemDefaultLCID
FreeLibrary
IsBadCodePtr
QueryPerformanceCounter
FileTimeToLocalFileTime
MoveFileA
IsDBCSLeadByte
GetModuleHandleW
WriteFile
GlobalLock
WriteConsoleA
VirtualFree
GetStartupInfoA
OpenProcess
DeleteFileA
lstrcmpiA

advapi32

CryptGenRandom
IsValidSid
SetSecurityDescriptorOwner
GetTokenInformation
RegEnumValueA
RegQueryValueExW
EqualSid
OpenServiceA
RegCreateKeyA

comctl32

ImageList_Write
ImageList_GetImageInfo
ImageList_DrawEx
PropertySheetW
PropertySheetA
ImageList_SetIconSize
ImageList_SetBkColor
ImageList_GetImageCount
InitCommonControlsEx
ImageList_SetDragCursorImage
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_DragShowNolock
ImageList_DragEnter

user32

UpdateWindow
KillTimer
OpenClipboard
EnableMenuItem
GetDlgItem
SetRect
CloseClipboard
RegisterClassA
DrawTextA
GetCapture

ole32

CoCreateInstance
DoDragDrop
CoTaskMemFree
StringFromIID
CreateBindCtx
OleRun
CoInitialize
CoReleaseMarshalData
StringFromCLSID
OleUninitialize
CoRevokeClassObject

oleaut32

VariantClear
SafeArrayCreate
SysReAllocStringLen
SafeArrayRedim
CreateErrorInfo
VariantInit

gdi32

GetViewportExtEx
CreateEnhMetaFileA
ExcludeClipRect
GetObjectW
GetTextFaceA
GetTextExtentPoint32A
GetTextColor
CreateCompatibleDC
OffsetWindowOrgEx

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fec872a9ea3b6842b198912143521fef

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

comctl32

user32

ole32

oleaut32

gdi32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 4KB - Virtual size: 76KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 4KB - Virtual size: 76KB