d519426574d89d7a5f9a93a3193bba26c097f54439688c0f1b02e7f76338847d

Sharing

Copy URL Twitter E-mail

General

Target

d519426574d89d7a5f9a93a3193bba26c097f54439688c0f1b02e7f76338847d
Size

103KB
MD5

13a30db422791d4ac1816a9b2eff61b0
SHA1

db356b8a9af9c69264b6ff4bb982ef7016249211
SHA256

d519426574d89d7a5f9a93a3193bba26c097f54439688c0f1b02e7f76338847d
SHA512

9e8479021e25e86ea7f932983aa05442289955c8cdb906b4457daa1c5690d214798ccae1d8504b345d441b9da24d93ccc369a6f894c5d462d502b8984c37e5d4
SSDEEP

3072:TZyIDJPKNcHLiK8/i+m6GHTD4WMSgQxZ1zad:Fy0JSK8/+60ss0

Score

N/A

Malware Config

Signatures

Files

d519426574d89d7a5f9a93a3193bba26c097f54439688c0f1b02e7f76338847d
.exe windows x86

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantChangeType
SafeArrayPtrOfIndex
GetErrorInfo
SysAllocStringLen
SafeArrayUnaccessData
SysReAllocStringLen
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
SafeArrayCreate
SafeArrayGetUBound
VariantCopyInd
SysAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SafeArrayUnaccessData

version

GetFileVersionInfoA
VerInstallFileA
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
VerInstallFileA

gdi32

CopyEnhMetaFileA
CreateCompatibleDC
CreateDIBSection
GetDCOrgEx

user32

GetCursorPos
GetCursor
IsWindowEnabled
GetCapture
GetScrollInfo
IntersectRect
AdjustWindowRectEx
SetWindowTextA
UnhookWindowsHookEx
LoadKeyboardLayoutA
GetMenuItemInfoA
GetMessagePos
OemToCharA

comctl32

ImageList_DrawEx
ImageList_Write
ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Create
ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_DragShowNolock
ImageList_Remove
ImageList_Write
ImageList_Create

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA
Shell_NotifyIconA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetFileInfoA
Shell_NotifyIconA

ole32

GetHGlobalFromStream
OleRun
StgCreateDocfileOnILockBytes
MkParseDisplayName
CoReleaseMarshalData
CoCreateGuid
CoUnmarshalInterface

shlwapi

SHDeleteValueA
SHDeleteKeyA
SHGetValueA
SHQueryValueExA

kernel32

ExitThread
GetModuleHandleA
GetACP
GetProcAddress
GetLastError
VirtualAlloc
Sleep
ResetEvent
GlobalAddAtomA
HeapFree
CloseHandle
GetStdHandle

advapi32

RegEnumValueA
RegDeleteKeyA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
FindTextA
GetFileTitleA
ChooseColorA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 575B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

Imports

oleaut32

version

gdi32

user32

comctl32

shell32

ole32

shlwapi

kernel32

advapi32

comdlg32

Sections

.text Size: 29KB - Virtual size: 28KB

DATA Size: 1024B - Virtual size: 575B

.edata Size: 70KB - Virtual size: 70KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

DATA
Size: 1024B - Virtual size: 575B

.edata
Size: 70KB - Virtual size: 70KB

.rdata
Size: 1KB - Virtual size: 1KB