852ead9ca19d18eb557f5c0775518eb5eb87a25c25b897972d2d8b3319c33ff4

Sharing

Copy URL Twitter E-mail

General

Target

852ead9ca19d18eb557f5c0775518eb5eb87a25c25b897972d2d8b3319c33ff4
Size

71KB
MD5

558411679f082df55091ace778758164
SHA1

3b4ebcd32859b8b53fd1ee9fc5628302d471f596
SHA256

852ead9ca19d18eb557f5c0775518eb5eb87a25c25b897972d2d8b3319c33ff4
SHA512

d0fd624069e040514ca2ae44dfe3a3241151e78aca7cb54cb43ac6d7210cd640cad395881d81c23a9f79fdedbcc648bf76dc1c8ae988bcc5bdd234da922aecac
SSDEEP

1536:ABqTen/QJ97NoqKTKbmVDTaWKkX1HPn9RngXhCN1U0I/c6/a:Ann/QJ97NGaWvlHnn+h61tI/g

Score

N/A

Malware Config

Signatures

Files

852ead9ca19d18eb557f5c0775518eb5eb87a25c25b897972d2d8b3319c33ff4
.exe windows x86

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CheckRadioButton
CharLowerA
GetClientRect
IsMenu
GetSystemMenu
ShowWindow
ChangeMenuA
GetDlgItem
CalcMenuBar
SendDlgItemMessageA
GetMessagePos
SetWindowTextW
GetWindowLongA
GetWindowTextA
GetPropA
SetMenu
GetSysColorBrush
MoveWindow
UnhookWindowsHookEx
IsChild
IsIconic

advapi32

IsValidAcl
ReportEventW
SetSecurityDescriptorGroup
RegEnumValueA
GetTokenInformation
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyW
OpenThreadToken
GetLengthSid
GetSecurityDescriptorDacl
RegDeleteKeyW
GetSidSubAuthorityCount
MakeSelfRelativeSD
InitializeAcl
RegOpenKeyA
CheckTokenMembership
GetUserNameA
SetSecurityDescriptorOwner

kernel32

VirtualAlloc
FormatMessageW
GetStdHandle
FreeLibrary
ExitProcess
LoadLibraryW
HeapFree
IsDBCSLeadByte
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
MultiByteToWideChar
lstrcmpA

msvcrt

_ltow
__p__fmode
towupper
_wcsnicmp
_adjust_fdiv
__set_app_type
bsearch
__p__commode
__setusermatherr
wcsncpy
wcsspn
fseek
strncmp
_acmdln
_snwprintf
realloc
__CxxFrameHandler
wcsrchr

ole32

OleRegEnumVerbs
OleUninitialize
StringFromGUID2
WriteClassStm
CreateILockBytesOnHGlobal
OleInitialize
CreateStreamOnHGlobal
PropVariantCopy
OleRegGetMiscStatus
CreateBindCtx

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

Imports

user32

advapi32

kernel32

msvcrt

ole32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 15KB - Virtual size: 76KB

.idata Size: 17KB - Virtual size: 17KB

.reloc Size: 1024B - Virtual size: 1004B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 15KB - Virtual size: 76KB

.idata
Size: 17KB - Virtual size: 17KB

.reloc
Size: 1024B - Virtual size: 1004B