ced226fd6a522547bea6180706ef152d5e083f85553688fccac4c089eabf5898

Sharing

Copy URL Twitter E-mail

General

Target

ced226fd6a522547bea6180706ef152d5e083f85553688fccac4c089eabf5898
Size

179KB
MD5

e6c2a339fc9b634b76c2a90ae3f0d261
SHA1

0bca6ba2046555c0b798ceb77410e7fbcbd6fbce
SHA256

ced226fd6a522547bea6180706ef152d5e083f85553688fccac4c089eabf5898
SHA512

00f693f6b637f611f7ad46753a2e4d65ff017968553e08be27f177882b41799d62f72ad3415194f381a3a046d3e84799d5c0403e3e26bb3db56649a33a74e23e
SSDEEP

3072:MRCcfK0iGLER5uGj4DfruEB0bp19AQTXIdwuD:MOlR5D4Djudbp19AQTXIdD

Score

N/A

Malware Config

Signatures

Files

ced226fd6a522547bea6180706ef152d5e083f85553688fccac4c089eabf5898
.exe windows x86

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Remove
ImageList_Write
ImageList_Add
ImageList_Draw
ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_Remove
ImageList_Add

advapi32

RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegLoadKeyA
RegCreateKeyA

kernel32

CreateFileA
GetFullPathNameA
ExitThread
GetModuleHandleA
ExitProcess
VirtualAlloc
ExitThread
LocalAlloc
GetModuleHandleW
IsBadReadPtr
lstrlenA
GetProcAddress
GetACP
LoadLibraryExA

msvcrt

strncmp
rand
wcstol

shlwapi

SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA
PathGetCharTypeA
SHDeleteKeyA

gdi32

CreatePalette
GetCurrentPositionEx
LineTo
CreatePenIndirect
CreateCompatibleDC

shell32

SHFileOperationA
SHGetDesktopFolder

version

VerFindFileA

oleaut32

VariantChangeType
SysReAllocStringLen
SafeArrayUnaccessData
GetErrorInfo
SysStringLen
SysAllocStringLen
VariantCopyInd
SysFreeString
SafeArrayCreate
RegisterTypeLib
VariantChangeType

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

ole32

CoCreateInstanceEx
WriteClassStm

user32

GetMenuItemCount
SetCapture

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA7
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA3
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

Imports

comctl32

advapi32

kernel32

msvcrt

shlwapi

gdi32

shell32

version

oleaut32

comdlg32

ole32

user32

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 1KB

.DATA1 Size: 2KB - Virtual size: 1KB

.DATA7 Size: 1024B - Virtual size: 867B

.DATA3 Size: 126KB - Virtual size: 125KB

.DATA9 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 1KB

.DATA1
Size: 2KB - Virtual size: 1KB

.DATA7
Size: 1024B - Virtual size: 867B

.DATA3
Size: 126KB - Virtual size: 125KB

.DATA9
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB