d9838bdb7f445b444bdec83530d465a0576b67b0cffa5dd867e71d178ed474d1

Sharing

Copy URL Twitter E-mail

General

Target

d9838bdb7f445b444bdec83530d465a0576b67b0cffa5dd867e71d178ed474d1
Size

71KB
MD5

9081f3e001fdebaa9feb6aabb7b7039c
SHA1

423a121900caa7cb2d445fd68967ed29f844039f
SHA256

d9838bdb7f445b444bdec83530d465a0576b67b0cffa5dd867e71d178ed474d1
SHA512

dc1e51201df10fe6aef270edffefef0d74c7ccf8d976ead87f7bffe95f42e2c838a39cc48c65e2756e6f43dc921c749b1153d92b744d033e366c22b0dcaf13b2
SSDEEP

1536:AbqTen/QJ97NoqKTKbmVDTaWKkX1HPn9RngXhCN1U0I/c6/a:AVn/QJ97NGaWvlHnn+h61tI/g

Score

N/A

Malware Config

Signatures

Files

d9838bdb7f445b444bdec83530d465a0576b67b0cffa5dd867e71d178ed474d1
.exe windows x86

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CheckRadioButton
CharLowerA
GetClientRect
IsMenu
GetSystemMenu
ShowWindow
ChangeMenuA
GetDlgItem
CalcMenuBar
SendDlgItemMessageA
GetMessagePos
SetWindowTextW
GetWindowLongA
GetWindowTextA
GetPropA
SetMenu
GetSysColorBrush
MoveWindow
UnhookWindowsHookEx
IsChild
IsIconic

advapi32

IsValidAcl
ReportEventW
SetSecurityDescriptorGroup
RegEnumValueA
GetTokenInformation
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyW
OpenThreadToken
GetLengthSid
GetSecurityDescriptorDacl
RegDeleteKeyW
GetSidSubAuthorityCount
MakeSelfRelativeSD
InitializeAcl
RegOpenKeyA
CheckTokenMembership
GetUserNameA
SetSecurityDescriptorOwner

kernel32

VirtualAlloc
FormatMessageW
GetStdHandle
FreeLibrary
ExitProcess
LoadLibraryW
HeapFree
IsDBCSLeadByte
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
MultiByteToWideChar
lstrcmpA

msvcrt

_ltow
__p__fmode
towupper
_wcsnicmp
_adjust_fdiv
__set_app_type
bsearch
__p__commode
__setusermatherr
wcsncpy
wcsspn
fseek
strncmp
_acmdln
_snwprintf
realloc
__CxxFrameHandler
wcsrchr

ole32

OleRegEnumVerbs
OleUninitialize
StringFromGUID2
WriteClassStm
CreateILockBytesOnHGlobal
OleInitialize
CreateStreamOnHGlobal
PropVariantCopy
OleRegGetMiscStatus
CreateBindCtx

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

Imports

user32

advapi32

kernel32

msvcrt

ole32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 15KB - Virtual size: 76KB

.idata Size: 17KB - Virtual size: 17KB

.reloc Size: 1024B - Virtual size: 1004B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 15KB - Virtual size: 76KB

.idata
Size: 17KB - Virtual size: 17KB

.reloc
Size: 1024B - Virtual size: 1004B