bcbd20aa9ea695ed4061cda23f7078f8b53816f17e3747f87d3d9b214df852e0

Sharing

Copy URL Twitter E-mail

General

Target

bcbd20aa9ea695ed4061cda23f7078f8b53816f17e3747f87d3d9b214df852e0
Size

253KB
MD5

e3a38e40fef04dea1c888151ac8741c6
SHA1

2788c52716072602a19ae62d1b1dafd92015748a
SHA256

bcbd20aa9ea695ed4061cda23f7078f8b53816f17e3747f87d3d9b214df852e0
SHA512

457b549df75e20a6ff9503d578a420862a12d095b8c81772882c70f6ef53e655e62d40f9777794b50fd65f12badfcd6b6879d328ca7dfe292837bd47036bed6c
SSDEEP

6144:d2tjN8qg0swN72JnLS1BjieHV4E+7wuTi0ZFStC/Qh:dhqjswAJnLSGK2XwmicEs/

Score

N/A

Malware Config

Signatures

Files

bcbd20aa9ea695ed4061cda23f7078f8b53816f17e3747f87d3d9b214df852e0
.exe windows x86

86d24b322efa105d84ba3bd9f89ddc7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetVersionExA
GetProcessHeap
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetLastError
MultiByteToWideChar
ExitProcess
Sleep
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
GetProcAddress

winipsec

GetQMPolicy
DeleteMMPolicy

user32

DestroyIcon
InvalidateRect
ShowWindow
ShowCursor
SendMessageW
EndDialog
SetWindowTextA
RegisterClassExA
TrackPopupMenuEx
RegisterClassW
DefWindowProcA
AppendMenuW
UnregisterClassW
LoadBitmapA
SetMenu
SetFocus
PostMessageA
GetMessageW
RegisterClassA
CreateAcceleratorTableW
CopyRect
LoadIconW
GetCursorPos

gdi32

CreateDIBPatternBrush
StretchDIBits
TranslateCharsetInfo
CreatePalette
RemoveFontResourceA
CreateHatchBrush
CreateCompatibleDC
CreateFontA
CreateFontIndirectW
CreatePen
CreateDIBSection
CreatePolygonRgn
GetTextExtentPointA
CreatePolyPolygonRgn
CreatePatternBrush

avifil32

AVIFileGetStream
AVIFileCreateStream
AVIStreamInfoW
AVIStreamGetFrameOpen
AVISaveVW
EditStreamSetInfoW
IID_IGetFrame
AVIFileOpenA
AVIMakeStreamFromClipboard
AVIPutFileOnClipboard

Sections

.icode
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iR
Size: 106KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cUtB
Size: 111KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86d24b322efa105d84ba3bd9f89ddc7f

Headers

File Characteristics

Imports

kernel32

winipsec

user32

gdi32

avifil32

Sections

.icode Size: 4KB - Virtual size: 3KB

.text Size: 12KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 38KB

.iR Size: 106KB - Virtual size: 165KB

.data Size: 5KB - Virtual size: 364KB

.cUtB Size: 111KB - Virtual size: 169KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 4KB

.icode
Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 38KB

.iR
Size: 106KB - Virtual size: 165KB

.data
Size: 5KB - Virtual size: 364KB

.cUtB
Size: 111KB - Virtual size: 169KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 4KB