c1bc7ecd2dd9745392cd65a8868edcad0e9dd477546f72871f47cbb141677e42

Sharing

Copy URL

Twitter E-mail

General

Target

c1bc7ecd2dd9745392cd65a8868edcad0e9dd477546f72871f47cbb141677e42
Size

97KB
MD5

37c7a3ad82950daf034722e040b1c263
SHA1

76565a61276a8c12e4e32990d82f16b2fa8c259c
SHA256

c1bc7ecd2dd9745392cd65a8868edcad0e9dd477546f72871f47cbb141677e42
SHA512

65088320fd3bb3e18ea746fff753196b5e18a66181433b7e92d3df7781ff341a8ef9b3e466ab41c757d6aeab6e815d37702757e2f547714845669628eeaaaee4
SSDEEP

1536:8JKWij2BrT2FILzJe4FUrPlENxKJcH6EndAWWCtzhoIoK5Q7+MZyMg4w6:sKWwRWJr0wgGaEndAWWoWK5sZr

Score

N/A

Malware Config

Signatures

Files

c1bc7ecd2dd9745392cd65a8868edcad0e9dd477546f72871f47cbb141677e42
.exe windows x86

50cc92adf3d134e0e654e05498c9be89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetIconInfo
SetWindowsHookExA
wsprintfA
FrameRect
RemovePropA
GetWindowRect
PostQuitMessage
SetDlgItemTextA
FindWindowA
GetSysColor
ScreenToClient
GetFocus
DrawTextA
GetPropA
CloseClipboard

msvcrt

_snprintf
strchr
strlen
memset
__setusermatherr
_exit
_adjust_fdiv
_initterm
__p__fmode
__p__commode
fopen
strcpy
sqrt
_except_handler3
__getmainargs
free
fputs
_acmdln
__set_app_type
_stricmp
calloc

comdlg32

GetOpenFileNameA

kernel32

FreeEnvironmentStringsW
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStartupInfoA
GetModuleFileNameW
SetUnhandledExceptionFilter
WaitForSingleObject
IsValidCodePage
GetUserDefaultLangID
GetStringTypeW
LCMapStringW
FlushFileBuffers
GetDateFormatA
GetNumberFormatA
CreateProcessW

comctl32

CreatePropertySheetPageA
ImageList_SetIconSize
ImageList_DragEnter
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_Create
ImageList_Destroy
ImageList_SetOverlayImage
ImageList_DragShowNolock
InitializeFlatSB
PropertySheetW
ImageList_SetBkColor

gdi32

CreateSolidBrush
GetDIBits
StartDocA
SetTextJustification
SetTextCharacterExtra
GetTextExtentPointW
CreateFontA
GetTextFaceW
GetPixel
PolylineTo
InvertRgn
ExtEscape
StrokeAndFillPath
SetWorldTransform
GetTextExtentExPointW

ole32

StgCreateDocfileOnILockBytes
CoTaskMemFree
CoInitialize
OleGetClipboard
CLSIDFromString
CreateBindCtx
CoTaskMemRealloc
CreateILockBytesOnHGlobal

advapi32

RegOpenKeyA
RegDeleteValueW
CryptDestroyHash
GetLengthSid
RegCloseKey
OpenServiceA
CloseServiceHandle
DeleteService
RegQueryValueExW
CryptReleaseContext
EqualSid
RegQueryInfoKeyA
RegEnumKeyW
RegOpenKeyExA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50cc92adf3d134e0e654e05498c9be89

Headers

File Characteristics

Imports

user32

msvcrt

comdlg32

kernel32

comctl32

gdi32

ole32

advapi32

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 9KB - Virtual size: 46KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 9KB - Virtual size: 46KB

.rsrc
Size: 17KB - Virtual size: 16KB