af7d03e3fb8884b34a0f9a001cab37833352c35a9207590c7edf73fcfc00730d

General

Target

af7d03e3fb8884b34a0f9a001cab37833352c35a9207590c7edf73fcfc00730d
Size

298KB
MD5

49dc96df0210a660a67471d406937f02
SHA1

3437c60bf55d9ad6d92db6a990cf475ba05d20db
SHA256

af7d03e3fb8884b34a0f9a001cab37833352c35a9207590c7edf73fcfc00730d
SHA512

c05428b9a56acbadfb9c7de8bef9632b06c67390bcf6499eb8e1e21c0427f8b870eaeea5707715aa9ef12b26372d5305f1a8bebbac5e55b024ebe925d1a88c91
SSDEEP

6144:QcmX3/qdpjlkTKMSXTLRWdlq3IS/8JQ9gh6zKNP:QR3/iZeLSXTQg3IQ81f

Score

N/A

Malware Config

Signatures

Files

af7d03e3fb8884b34a0f9a001cab37833352c35a9207590c7edf73fcfc00730d
.dll windows x86

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib

advapi32

ControlService
StartServiceA
OpenProcessToken
SetSecurityDescriptorDacl
QueryServiceStatus

ole32

WriteFmtUserTypeStg
GetRunningObjectTable
GetConvertStg
CoDisconnectObject
CreateDataAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoGetMalloc
CoGetClassObject

user32

SetCursor
MessageBoxIndirectA
DrawIcon
DefDlgProcA
ShowOwnedPopups

shell32

SHGetFileInfoA
SHBindToParent
SHFileOperationA

shlwapi

PathFindExtensionA
PathCompactPathExA
PathCanonicalizeA
PathIsDirectoryA
PathQuoteSpacesA
PathUnquoteSpacesA

msvcrt

time
strstr
sprintf
memchr
rand
fflush
malloc
vsprintf

kernel32

TlsSetValue
lstrcatA
lstrcpyA
RaiseException
LocalAlloc
GetDateFormatA
FreeResource
FlushFileBuffers
EnumResourceLanguagesA
ReadFile

Exports

Exports

Fny
Fzm
Gye
Jaj
Mfk
Mnc
Qwh
Tqp
Vam
Vgv
Xbn
Xqd
Ygl

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 178KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b78dc465aa49a435e17ef945d275bb2

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 32KB

.rdata Size: 31KB - Virtual size: 32KB

.data Size: 35KB - Virtual size: 36KB

.idata Size: 178KB - Virtual size: 180KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 28KB - Virtual size: 32KB

.rdata
Size: 31KB - Virtual size: 32KB

.data
Size: 35KB - Virtual size: 36KB

.idata
Size: 178KB - Virtual size: 180KB

.rsrc
Size: 24KB - Virtual size: 28KB