e09ae921cd796c7f0cb2b01dfde77e6ecb81e27b9e59c03dfe6b3426b67ed88d

Sharing

Copy URL Twitter E-mail

General

Target

e09ae921cd796c7f0cb2b01dfde77e6ecb81e27b9e59c03dfe6b3426b67ed88d
Size

91KB
MD5

1749d61ca5c650aab116790413fd6a13
SHA1

0ae92ed4102aa6ae756184c615144ee9ca3f92fc
SHA256

e09ae921cd796c7f0cb2b01dfde77e6ecb81e27b9e59c03dfe6b3426b67ed88d
SHA512

3f04a987800ea729a14eed923916f8333cd622f37a4064cd1d9f6c3142f571e60566d9fcf1e61385863fcf9bebec2187bae34c2eb966e2902c3cf1f799d81fb0
SSDEEP

1536:k4hh1YHevg0ErhcbV1k8zM4hxGcp0/mlf+aPUkwHPi7OfJ1s:k4hh1Xg3lc7kM1p0/mJULhf4

Score

N/A

Malware Config

Signatures

Files

e09ae921cd796c7f0cb2b01dfde77e6ecb81e27b9e59c03dfe6b3426b67ed88d
.exe windows x86

8474298a3497aeaba48dd2918737e704

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegReplaceKeyW
RegQueryValueExW
RegReplaceKeyA
RegQueryValueA
RegEnumKeyExW
RegEnumKeyA
RegQueryValueExA
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegFlushKey
RegOpenKeyA
RegEnumKeyW
RegDeleteValueA

user32

AppendMenuW
GetWindowTextA
GetCursor
IsMenu
CalcMenuBar
DrawTextW
CopyRect
LoadMenuA
DrawIcon
BlockInput
CopyImage
DialogBoxParamW
DialogBoxParamA
LoadCursorA
GetDlgItem
InsertMenuA

kernel32

GetFileType
GetStdHandle
GetCommandLineA
GetLastError
GetStringTypeA
GetFileSize
DeleteFileA
GlobalFree
Sleep
lstrcpyA
GetCPInfo
lstrcmpA
GetLocalTime
lstrlenA
WideCharToMultiByte
HeapAlloc
FreeLibrary
lstrcatA
lstrcpynA

comctl32

ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_LoadImageW
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_Merge
ImageList_EndDrag
ImageList_Read
ImageList_GetIcon
ImageList_Copy
ImageList_DragMove
ImageList_LoadImage
ImageList_Replace
ImageList_GetImageInfo
ImageList_AddIcon

Sections

.qLawXP
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RNwPz
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.afyh
Size: 7KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CuzShI
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HUnns
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8474298a3497aeaba48dd2918737e704

Headers

File Characteristics

Imports

advapi32

user32

kernel32

comctl32

Sections

.qLawXP Size: 16KB - Virtual size: 15KB

.RNwPz Size: 28KB - Virtual size: 28KB

.afyh Size: 7KB - Virtual size: 48KB

.CuzShI Size: 1024B - Virtual size: 1KB

.HUnns Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 4KB

.qLawXP
Size: 16KB - Virtual size: 15KB

.RNwPz
Size: 28KB - Virtual size: 28KB

.afyh
Size: 7KB - Virtual size: 48KB

.CuzShI
Size: 1024B - Virtual size: 1KB

.HUnns
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 4KB