cad7ea0346b6f6b9ff476a273ffac56289686782b67dcfc5d9c2982bd837c54c

Sharing

Copy URL Twitter E-mail

General

Target

cad7ea0346b6f6b9ff476a273ffac56289686782b67dcfc5d9c2982bd837c54c
Size

25KB
MD5

22a32ef6f04991ced9ed5791834bdda0
SHA1

005592d599d3de5a7665061d1ff364746e33d69f
SHA256

cad7ea0346b6f6b9ff476a273ffac56289686782b67dcfc5d9c2982bd837c54c
SHA512

5ce85700235d29b4e542f245d5aca31a7c1c4a53a927a2e184e5db9ab9bd582ded847f52a654daac2f27b14dc6e2a43b7db04864a8fe127deb89292e66e7856b
SSDEEP

384:uoErbPxH+4kmTJ4R0ysznYVMnAxx6lEnVDgNbhLow2aCFtCtVgSZrxrTYzi3R7B:5yb5+nm5/oCyVDg7LL2aC3/SVc+3R7B

Score

N/A

Malware Config

Signatures

Files

cad7ea0346b6f6b9ff476a273ffac56289686782b67dcfc5d9c2982bd837c54c
.exe windows x86

693b4e30c6fedbfa9ffd6c8e8c2cb569

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetObjectW
Polyline
SetBkMode
SetTextColor
DeleteObject

shell32

FreeIconList
ShellHookProc
CommandLineToArgvW

dbghelp

EnumerateLoadedModules
SymUnDName64
SymGetModuleInfoW
SymGetLineFromName64
StackWalk
MiniDumpWriteDump
FindFileInPath

shlwapi

PathAppendW
PathFindFileNameW
PathQuoteSpacesW
SHAutoComplete
StrChrW
StrCmpW
StrToIntW

user32

DispatchMessageA
PeekMessageA
ReuseDDElParam
SetClassLongW
CountClipboardFormats

imm32

ImmLockIMCC
ImmGetOpenStatus
ImmGetDefaultIMEWnd
ImmGetConversionListA

kernel32

EnterCriticalSection
lstrcpynW
UnmapViewOfFile
UnhandledExceptionFilter
TransmitCommChar
TerminateProcess
SetUnhandledExceptionFilter
SetEvent
ReadFileEx
QueryPerformanceCounter
MapViewOfFile
LocalFree
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
InitializeCriticalSection
GlobalWire
GlobalFree
GetWindowsDirectoryW
GetTickCount
GetTempPathW
GetTempFileNameW
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
CloseHandle
CreateFileMappingW
CreateFileW
CreateProcessW
DeleteCriticalSection
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetLastError

Sections

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

693b4e30c6fedbfa9ffd6c8e8c2cb569

Headers

File Characteristics

Imports

gdi32

shell32

dbghelp

shlwapi

user32

imm32

kernel32

Sections

.text Size: 14KB - Virtual size: 16KB

.rdata Size: 6KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 16KB

.rdata
Size: 6KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 3KB