f4aba60f8918881cc1c8a1fe07e01d27523cbf3df6de9adf9942969548464451

Sharing

Copy URL Twitter E-mail

General

Target

f4aba60f8918881cc1c8a1fe07e01d27523cbf3df6de9adf9942969548464451
Size

212KB
MD5

88b8d2236919422d8c84f7e3c29ebfe9
SHA1

28beb32e5e2f73499649289bc63fc1ccd555130c
SHA256

f4aba60f8918881cc1c8a1fe07e01d27523cbf3df6de9adf9942969548464451
SHA512

dc505e425e122cfb8c0e0e12c62a302c7e58f014d18a782789c915c65af03ee1cb47e728c68d4942cd0c795207f4e1a68276d62ca2eb307956a121a56f732a15
SSDEEP

3072:Bp9qJ0imqb+oSyLytqMxuud33XcGXsYQYlLBd+FkGGut+6a1hdYQllI18+EVVS:Bp9qmihbz1yjxXncGXFQYpGGu0Dhdd

Score

N/A

Malware Config

Signatures

Files

f4aba60f8918881cc1c8a1fe07e01d27523cbf3df6de9adf9942969548464451
.exe windows x86

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

acos
atol

gdi32

CreateDIBitmap
GetDIBits
CreatePalette
CreateBrushIndirect
SetPixel
CreateDIBSection
SetBkColor
CopyEnhMetaFileA

version

VerInstallFileA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

WriteClassStm
CLSIDFromString
CreateOleAdviseHolder
CLSIDFromProgID
GetHGlobalFromStream
CoTaskMemFree
CoDisconnectObject
MkParseDisplayName
StringFromIID

advapi32

RegEnumKeyExA
GetUserNameA
RegOpenKeyA
RegCreateKeyA

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Remove

kernel32

SetErrorMode
GetCommandLineW
EnterCriticalSection
ExitThread
MulDiv
lstrcmpA
lstrlenA
GetProcAddress
GetLocalTime
IsBadReadPtr
GetSystemDefaultLangID
SizeofResource
IsBadHugeReadPtr
LoadLibraryExA
ExitProcess
GetCommandLineA
VirtualAllocEx
WaitForSingleObject
GetModuleHandleA
CreateThread
VirtualAlloc

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
FindTextA

shlwapi

PathFileExistsA
SHDeleteKeyA
SHEnumValueA
SHSetValueA
SHQueryInfoKeyA
SHGetValueA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc6
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc3
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc2
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

Imports

msvcrt

gdi32

version

ole32

advapi32

comctl32

kernel32

comdlg32

shlwapi

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 144KB - Virtual size: 144KB

.Rsrc8 Size: 1KB - Virtual size: 1KB

.Rsrc4 Size: 2KB - Virtual size: 1KB

.Rsrc0 Size: 2KB - Virtual size: 1KB

.Rsrc6 Size: 512B - Virtual size: 189B

.Rsrc3 Size: 1024B - Virtual size: 907B

.Rsrc2 Size: 512B - Virtual size: 313B

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 144KB - Virtual size: 144KB

.Rsrc8
Size: 1KB - Virtual size: 1KB

.Rsrc4
Size: 2KB - Virtual size: 1KB

.Rsrc0
Size: 2KB - Virtual size: 1KB

.Rsrc6
Size: 512B - Virtual size: 189B

.Rsrc3
Size: 1024B - Virtual size: 907B

.Rsrc2
Size: 512B - Virtual size: 313B

.rsrc
Size: 1024B - Virtual size: 920B