ea2c8c48ce079c26f9a7a0ed83f802aebd35d2a5a331d427d178e06864979374

Sharing

Copy URL

Twitter E-mail

General

Target

ea2c8c48ce079c26f9a7a0ed83f802aebd35d2a5a331d427d178e06864979374
Size

104KB
MD5

6a64171257c87bc8fa147de0f09bced9
SHA1

9af35487bd53e08a25fa8d8007a7b27089376f3d
SHA256

ea2c8c48ce079c26f9a7a0ed83f802aebd35d2a5a331d427d178e06864979374
SHA512

fe28dfbccd4526e0b66c19753ca4d3f63efe7bc8a9f34a10364c28edf5e5b21a0087126a4bd051578cbf6cb1dd07b4e007373016876454c81440ffa69265e867
SSDEEP

1536:+SrnTWQZdPPXeNNxA3/ki/7sCzg1un+NBzJB+iROb1XBZiDJO8OJ3s+yZMXcgLoS:+SzTWsPPXlPkrCzan/GiROJd3svZ5S

Score

N/A

Malware Config

Signatures

Files

ea2c8c48ce079c26f9a7a0ed83f802aebd35d2a5a331d427d178e06864979374
.exe windows x86

cad9bc7035cf63c11e546589fea65212

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetImageCount
ImageList_Destroy
ImageList_LoadImageW

gdi32

PathToRegion
SetPaletteEntries
SetDIBitsToDevice
GetFontData
IntersectClipRect
SetROP2
CreateEllipticRgnIndirect
SetLayout
GetTextExtentPoint32A

kernel32

SetMailslotInfo
CreateDirectoryA
HeapUnlock
SetUnhandledExceptionFilter
IsValidLocale
GetModuleFileNameA
lstrlenW
GetWindowsDirectoryA
SetFileAttributesA
QueryDosDeviceW
GetModuleHandleA
GetNumberFormatA

comdlg32

ReplaceTextW
CommDlgExtendedError
GetSaveFileNameA

shlwapi

StrCatBuffW

user32

GetSysColor
GetWindowDC
IsCharLowerA
GetWindowLongW
BeginPaint
wsprintfW
LoadStringA
GetMenuItemRect
GetMenuItemID
GetWindowTextLengthW
SetWindowTextA
CreateDialogParamW
TileWindows
GetKeyboardLayout

Exports

Exports

?qaJFgdqswGGh@@YGXPAM@Z
?xsmfwmLOqmgGeeqYuaP@@YGJPAJI@Z
?vzAgqxrfimoVurbanm@@YGFJM@Z

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cad9bc7035cf63c11e546589fea65212

Headers

File Characteristics

Imports

comctl32

gdi32

kernel32

comdlg32

shlwapi

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 317KB

.edata Size: 1024B - Virtual size: 684B

.pdata Size: 9KB - Virtual size: 9KB

.xdata Size: 113KB - Virtual size: 113KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 317KB

.edata
Size: 1024B - Virtual size: 684B

.pdata
Size: 9KB - Virtual size: 9KB

.xdata
Size: 113KB - Virtual size: 113KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 3KB - Virtual size: 2KB