ccd97c008cc27fc984303ad0ecfe211f3c25e9757c49d230926012a01c63cb65

Sharing

Copy URL Twitter E-mail

General

Target

ccd97c008cc27fc984303ad0ecfe211f3c25e9757c49d230926012a01c63cb65
Size

307KB
MD5

ece18907be4d963760fdc952631b76d9
SHA1

b020f7520a6c87d79a747bd280115e276853fdb8
SHA256

ccd97c008cc27fc984303ad0ecfe211f3c25e9757c49d230926012a01c63cb65
SHA512

1bdfb7409ecec518687054a437c428256272d6b0e087998012b1a5184ce2fa0d528b62673aee0dfa8ee8992fc9a8c916398ebf16937b671fa03e7df441c19312
SSDEEP

6144:1w9++bLjS10iDOEhAOlj/uuJudyHj+VABWviGvQx:GvS6iDPNptyVAmQx

Score

N/A

Malware Config

Signatures

Files

ccd97c008cc27fc984303ad0ecfe211f3c25e9757c49d230926012a01c63cb65
.exe windows x86

f3e899f66e75e71255e8b5a50d9ac7f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
lstrlenW
LeaveCriticalSection
GetProcessHeap
DeleteCriticalSection
CloseHandle
EnterCriticalSection
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetFileInformationByHandle
LockResource
FindResourceW
RaiseException
GetCurrentThreadId
HeapSize
CompareFileTime
IsProcessorFeaturePresent
SizeofResource
HeapFree
LoadResource
GetSystemTimeAsFileTime
FindResourceExW
HeapDestroy
SwitchToThread
HeapReAlloc
IsDebuggerPresent
CreateFileW
VirtualAlloc

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW

oleaut32

VariantInit
SysAllocStringLen
UnRegisterTypeLi
VariantClear
VarBstrCmp
VariantChangeType
SysStringLen
SysStringByteLen
SafeArrayLock
LoadRegTypeLi
VarBstrCat
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayDestroy
RegisterTypeLi
SafeArrayGetUBound
SysAllocString
SafeArrayGetLBound
SysFreeString
SafeArrayGetVartype
VarBstrFromDec
SetErrorInfo

user32

CharNextW
RegisterWindowMessageW
GetDC
CharPrevA
MessageBoxIndirectW
DestroyCursor
GetMessageA
GetScrollPos
LoadImageW
wsprintfA
WaitForInputIdle
wvsprintfW
LoadIconA
LoadMenuA
PostMessageW
EnumWindows
TrackPopupMenuEx
GetMenuItemRect

ole32

IIDFromString
StringFromGUID2
CLSIDFromString
CoCreateInstance

gdi32

GetLayout

shimeng

SE_DllUnloaded
SE_ProcessDying
SE_DynamicShim
SE_InstallBeforeInit

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 269KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3e899f66e75e71255e8b5a50d9ac7f3

Headers

File Characteristics

Imports

kernel32

advapi32

oleaut32

user32

ole32

gdi32

shimeng

Sections

.text Size: 17KB - Virtual size: 16KB

.data Size: 269KB - Virtual size: 400KB

.rdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 17KB - Virtual size: 26KB

.text
Size: 17KB - Virtual size: 16KB

.data
Size: 269KB - Virtual size: 400KB

.rdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 17KB - Virtual size: 26KB