e12079848553e9dd90233ba2d30a67d61858326ef815ec86647e4fb160c5c3cc

Sharing

Copy URL Twitter E-mail

General

Target

e12079848553e9dd90233ba2d30a67d61858326ef815ec86647e4fb160c5c3cc
Size

248KB
MD5

21154e8e42728e657a14cdd0be0935b0
SHA1

2fe4e907dfd54137048306037fc05a64f67f0281
SHA256

e12079848553e9dd90233ba2d30a67d61858326ef815ec86647e4fb160c5c3cc
SHA512

f859b860caab8714031b27e944ffe463ce25ff8ba2b1bed6f4bf7a9f34b0ba4cc124a65ca71265664eb7eacea2a155bfa14e80695569391466735a2d172b64d8
SSDEEP

3072:tEZ1mhjc4CMBbs6U29xKgEucpUeKMRWtdj3wMOKad7DBqcvemmFAjDohhPPi1d1k:tCIjrCMBbsJ2S4t+idWXMCIhP61dzBD

Score

N/A

Malware Config

Signatures

Files

e12079848553e9dd90233ba2d30a67d61858326ef815ec86647e4fb160c5c3cc
.exe windows x86

0d1664a496e695ca4b334a50e374db86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStringTypeW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

user32

CreateMDIWindowW
SetDebugErrorLevel
WaitMessage
GetDlgItemInt
DeleteMenu
SystemParametersInfoW
AttachThreadInput
DlgDirSelectComboBoxExW
GetPropW
GetMenuItemInfoA

oleaut32

CreateStdDispatch
SafeArrayRedim
VarFormatCurrency
SafeArrayDestroyData
SafeArrayPtrOfIndex
CreateTypeLi
VarDiv
VarSu
VariantChangeType
CreateDispTypeInfo

comctl32

ImageList_SetImageCount
ImageList_Remove
ImageList_Write
ImageList_ReplaceIcon
FlatSB_SetScrollRange
ImageList_Read
ImageList_Create
ImageList_Add
ImageList_Merge

shlwapi

PathIsRootW
PathIsSameRootW
PathAddBackslashA
PathIsRootA
PathUnquoteSpacesA
SHGetValueA
PathIsUNCW
ChrCmpIW

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d1664a496e695ca4b334a50e374db86

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

comctl32

shlwapi

Sections

.text Size: 151KB - Virtual size: 150KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 1KB - Virtual size: 238KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 151KB - Virtual size: 150KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 1KB - Virtual size: 238KB

.rsrc
Size: 6KB - Virtual size: 5KB