ff6f14e8a3e50ffa23c74acdc8edf659835361b0b60d23c051d9c376368ded12

Sharing

Copy URL Twitter E-mail

General

Target

ff6f14e8a3e50ffa23c74acdc8edf659835361b0b60d23c051d9c376368ded12
Size

313KB
MD5

2871fdc3c364def709faac656399ddbe
SHA1

013ec31cab905cd38c127b4c303487416fcb98db
SHA256

ff6f14e8a3e50ffa23c74acdc8edf659835361b0b60d23c051d9c376368ded12
SHA512

e5dbcee1085c001ba493f11074f8bddecf314023a5fbb2a0d2b371e9f7273a136e8bd977590f1357b25d2dea8c5059b279afddaba7de57693f73601724a42030
SSDEEP

6144:JGk/IDniUh8ybb4PHw6uPv6I4GkXa3zEXC6AjMBb8mJ88B6q91uM:g/b8qEY6Oh4GkXa3zFMPjMEuM

Score

N/A

Malware Config

Signatures

Files

ff6f14e8a3e50ffa23c74acdc8edf659835361b0b60d23c051d9c376368ded12
.exe windows x86

50ba80c852b2c0ae0e23cca8a56a6b60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

olecli32

BmCopy
GenClone
OleDraw
ErrReconnect
OleCreateLinkFromClip
OleSetHostNames
OleRename
LeQueryBounds
OleRelease
GenCopy
OleClone
GenEnumFormat
LeShow
ObjRename
ObjQuerySize
OleQueryProtocol
OleEnumObjects
DefCreateLinkFromFile
PbGetData
GenEqual
OleCreateFromTemplate
OleSetTargetDevice
DibQueryBounds
ErrShow
OleDelete
PbCreateInvisible
DocWndProc
OleExecute
LeReconnect
MfQueryBounds

ole32

HENHMETAFILE_UserSize
CreateOleAdviseHolder
HMETAFILEPICT_UserFree
CoMarshalInterface
PropVariantCopy
SetErrorInfo
OleCreateFromData
CoGetInterfaceAndReleaseStream
CoReactivateObject
GetHookInterface
HDC_UserMarshal
MonikerRelativePathTo
GetConvertStg
WriteOleStg
HACCEL_UserMarshal
MonikerCommonPrefixWith
WriteStringStream
CreateClassMoniker
CreateDataCache
ReadClassStg
OleDuplicateData
CoSetProxyBlanket
OleCreateLinkEx
GetClassFile
CoFreeAllLibraries
SNB_UserSize
CreateDataAdviseHolder
CreateItemMoniker

kernel32

GetFileTime
QueryPerformanceCounter
WriteProfileStringA
MoveFileExA
GetCurrentConsoleFont
GlobalGetAtomNameW
GetCurrentThread
CreateEventA
SetEndOfFile
GetModuleHandleW
TransactNamedPipe
GetEnvironmentStrings
GetUserDefaultLCID
lstrcatA
FatalAppExitW
LoadLibraryW
GetLocaleInfoW
IsBadStringPtrW

msvfw32

DrawDibTime
ICClose
ICOpen
DrawDibEnd
MCIWndCreateW
GetOpenFileNamePreviewW
DrawDibGetPalette
MCIWndCreate
DrawDibStop
ICSendMessage
ICCompressorChoose
ICSeqCompressFrameEnd
ICSeqCompressFrame
ICInstall
ICRemove
ICOpenFunction
DrawDibDraw
VideoForWindowsVersion
GetOpenFileNamePreviewA
ICLocate
ICDecompress
DrawDibSetPalette
ICImageCompress
DrawDibBegin
ICInfo
DrawDibRealize
MCIWndRegisterClass
DrawDibProfileDisplay

shell32

RealShellExecuteW
SHGetNewLinkInfoA
SHFormatDrive
DllInstall
SHGetFolderPathAndSubDirA
SHGetFolderLocation
StrNCmpIW
DragQueryFileA
SHEmptyRecycleBinA
InternalExtractIconListA
ShellExecuteExW
SHGetIconOverlayIndexA
SHFileOperationA

shlwapi

SHQueryInfoKeyW
PathUnquoteSpacesA
PathIsNetworkPathW
SHRegDeleteUSValueA
PathGetArgsW
PathRemoveFileSpecA
SHRegSetPathA
PathFindOnPathA
SHDeleteEmptyKeyW
SHRegWriteUSValueA
PathCombineA
PathRemoveBackslashA
PathGetDriveNumberA
SHRegDeleteEmptyUSKeyW
StrChrIW
ColorAdjustLuma
PathSetDlgItemPathW
UrlGetLocationW

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ba80c852b2c0ae0e23cca8a56a6b60

Headers

File Characteristics

Imports

olecli32

ole32

kernel32

msvfw32

shell32

shlwapi

Sections

.text Size: 130KB - Virtual size: 129KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 8KB - Virtual size: 62KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 130KB - Virtual size: 129KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 8KB - Virtual size: 62KB

.rsrc
Size: 112KB - Virtual size: 112KB