a4cdfc0e010614b8ad7d2c1a3486481b7cfc3b275aab78eebea2feec388dd291

Sharing

Copy URL Twitter E-mail

General

Target

a4cdfc0e010614b8ad7d2c1a3486481b7cfc3b275aab78eebea2feec388dd291
Size

254KB
MD5

989042328a4026322e8dab5617a0929a
SHA1

63dc9ee42bbce14b33b213563a9bf8a6919e6f2f
SHA256

a4cdfc0e010614b8ad7d2c1a3486481b7cfc3b275aab78eebea2feec388dd291
SHA512

7dec3a4480c2f8ab4944d64a4714b1d3c63b653342e474a09a6c8c274502e96b4b5113305aac9253a2a41d73261eda486000b772cf5720e2bb5710389f24eec6
SSDEEP

3072:Y/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:uwVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Score

N/A

Malware Config

Signatures

Files

a4cdfc0e010614b8ad7d2c1a3486481b7cfc3b275aab78eebea2feec388dd291
.exe windows x86

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PatBlt
GetObjectW
CreateDCW
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
DeleteObject

kernel32

LeaveCriticalSection
HeapFree
IsDebuggerPresent
LockResource
EnterCriticalSection
lstrcmpiW
HeapSize
GetModuleHandleW
CreateFileW
RaiseException
GetFileSize
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
FindClose
LocalAlloc
FindFirstFileW
lstrlenW
GetTimeZoneInformation
FormatMessageW
UnhandledExceptionFilter
EnumResourceNamesW
SizeofResource
GetCurrentThreadId
FindResourceExW
GetSystemTime
LoadResource
FindResourceW
HeapDestroy
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
ReadFile
SetUnhandledExceptionFilter
OutputDebugStringW
FreeLibrary
ProcessIdToSessionId
GetProcessHeap
CloseHandle
HeapReAlloc
SystemTimeToFileTime
LoadLibraryExW
CompareFileTime
VirtualAllocEx

ole32

CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VarUI4FromStr

user32

CharNextW
GetForegroundWindow
AllowSetForegroundWindow
DestroyIcon
GetSystemMetrics
GetDesktopWindow
DrawIconEx
GetActiveWindow
LoadImageW

esent

JetFreeBuffer
JetCloseFile
JetDupCursor
JetGetDatabaseFileInfo
JetCreateDatabase2
JetMakeKey
JetCreateInstance
JetDefragment
JetSetLS
JetOpenTempTable3
JetAddColumn
JetInit2
JetEnumerateColumns
JetTerm2
JetDeleteIndex
JetMove
ese

wmpshell

DllRegisterServer
DllCanUnloadNow

Sections

.YolX
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UrnGiP
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.awBQJUL
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.slUCrgA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GdUqi
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fvTRZ
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mHTN
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GjQNcMz
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZJhdvo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sIVhg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

esent

wmpshell

Sections

.YolX Size: 1KB - Virtual size: 27KB

.text Size: 17KB - Virtual size: 17KB

.UrnGiP Size: 1KB - Virtual size: 1KB

.awBQJUL Size: 2KB - Virtual size: 1KB

.slUCrgA Size: 2KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 61KB

.GdUqi Size: 2KB - Virtual size: 2KB

.rdata Size: 208KB - Virtual size: 207KB

.fvTRZ Size: 1024B - Virtual size: 790B

.mHTN Size: 512B - Virtual size: 396B

.rsrc Size: 5KB - Virtual size: 4KB

.GjQNcMz Size: 512B - Virtual size: 266B

.ZJhdvo Size: 1KB - Virtual size: 1KB

.sIVhg Size: 2KB - Virtual size: 2KB

.YolX
Size: 1KB - Virtual size: 27KB

.text
Size: 17KB - Virtual size: 17KB

.UrnGiP
Size: 1KB - Virtual size: 1KB

.awBQJUL
Size: 2KB - Virtual size: 1KB

.slUCrgA
Size: 2KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 61KB

.GdUqi
Size: 2KB - Virtual size: 2KB

.rdata
Size: 208KB - Virtual size: 207KB

.fvTRZ
Size: 1024B - Virtual size: 790B

.mHTN
Size: 512B - Virtual size: 396B

.rsrc
Size: 5KB - Virtual size: 4KB

.GjQNcMz
Size: 512B - Virtual size: 266B

.ZJhdvo
Size: 1KB - Virtual size: 1KB

.sIVhg
Size: 2KB - Virtual size: 2KB