72daf95ec5a56fadc5edbbdf7052e507b406f9fafe7cdc21c0952e5c628d533c

Sharing

Copy URL Twitter E-mail

General

Target

72daf95ec5a56fadc5edbbdf7052e507b406f9fafe7cdc21c0952e5c628d533c
Size

81KB
MD5

24bb9d9f8d86b63e46b2e1419bb3b400
SHA1

3584e142b3f611898c28ee899842e5e8c3dfc731
SHA256

72daf95ec5a56fadc5edbbdf7052e507b406f9fafe7cdc21c0952e5c628d533c
SHA512

0f9f2f53c5ac57b73a340012e78fb53a299556e5c5fe54e7cc50ca3be4d2da2e707871c4bd1b831af9c3491f9d964ecf3db75abdd414156494f471270ef9a788
SSDEEP

1536:AOjoqT5Kr445hHghFI7E8SSUk0/GAolZNe:AUK445hAhFHk3Ao5

Score

N/A

Malware Config

Signatures

Files

72daf95ec5a56fadc5edbbdf7052e507b406f9fafe7cdc21c0952e5c628d533c
.exe windows x86

84e5e069d852ec276185ff2a0ce4ffd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
LoadIconA
CreateWindowExA

oledlg

ord3
ord1
ord4
ord12
ord10
ord11
ord5
ord7
ord8
ord9

gdi32

GdiComment
ExtEscape
ExcludeClipRect
EndPage
CopyEnhMetaFileA
CreateDCW
CreateCompatibleBitmap
Escape
CreateFontA
Chord
CopyEnhMetaFileW
FillRgn
CloseEnhMetaFile
Arc

comctl32

ord16
ord17
DestroyPropertySheetPage
ord5
CreatePropertySheetPageA
CreateToolbarEx
FlatSB_SetScrollPos
FlatSB_GetScrollProp
FlatSB_GetScrollRange
InitializeFlatSB
PropertySheetA
CreateStatusWindowW
ord3

shlwapi

StrChrA
StrStrA
StrCSpnA
StrChrIW
StrToIntA
StrCmpNA

kernel32

GetCurrencyFormatA
HeapCompact
VirtualProtect
MultiByteToWideChar
WideCharToMultiByte
IsBadWritePtr
WaitForSingleObject
GetSystemDefaultLCID
GetThreadLocale
GetProcessHeap
FoldStringA
GetUserDefaultLCID
GetModuleHandleA
GetProcAddress
VirtualAllocEx
GetStartupInfoA

usp10

ScriptPlace
ScriptStringFree
ScriptGetGlyphABCWidth

ws2_32

htons
setsockopt
sendto
recv
htonl
bind
recvfrom
ntohs
inet_addr
select
getservbyport
getprotobynumber
listen
closesocket

wsnmp32

ord200
ord201

cryptui

CryptUIWizExport
CryptUIWizDigitalSign
CryptUIWizImport

msvcrt

fseek
fwrite
_flushall
fprintf
fopen
_fullpath
fread
freopen
_fsopen
free
fscanf
fsetpos
_pctype
_isctype
__mb_cur_max
iswctype
perror
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84e5e069d852ec276185ff2a0ce4ffd6

Headers

File Characteristics

Imports

user32

oledlg

gdi32

comctl32

shlwapi

kernel32

usp10

ws2_32

wsnmp32

cryptui

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 13KB - Virtual size: 17KB

.rsrc Size: 42KB - Virtual size: 42KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 13KB - Virtual size: 17KB

.rsrc
Size: 42KB - Virtual size: 42KB

.reloc
Size: 1KB - Virtual size: 1KB