bbe41f6c50db24f0f4c57b1f6d20174b5bc73e2192a30897818490776c055586

Sharing

Copy URL Twitter E-mail

General

Target

bbe41f6c50db24f0f4c57b1f6d20174b5bc73e2192a30897818490776c055586
Size

212KB
MD5

ee90d38b136fb4df25a42299eb8a6560
SHA1

285b444ae8c16c31bf2837f09a66e7268a8b083b
SHA256

bbe41f6c50db24f0f4c57b1f6d20174b5bc73e2192a30897818490776c055586
SHA512

ad4301fba0a336b790b6eefe7954e35c1a56cabf3da90db031f2b8b5e17a554bbf8579df7b1b0675cd8d0ef241562198bdd5e2941191d16a2e472d8c93450777
SSDEEP

3072:Bp9qJ0imqb+oSyLytqMxuud33XcGXsYQYlLBdmFkGGut+6a1hdYQllI18+EVVS:Bp9qmihbz1yjxXncGXFQYpOGu0Dhdd

Score

N/A

Malware Config

Signatures

Files

bbe41f6c50db24f0f4c57b1f6d20174b5bc73e2192a30897818490776c055586
.exe windows x86

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

acos
atol

gdi32

CreateDIBitmap
GetDIBits
CreatePalette
CreateBrushIndirect
SetPixel
CreateDIBSection
SetBkColor
CopyEnhMetaFileA

version

VerInstallFileA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

WriteClassStm
CLSIDFromString
CreateOleAdviseHolder
CLSIDFromProgID
GetHGlobalFromStream
CoTaskMemFree
CoDisconnectObject
MkParseDisplayName
StringFromIID

advapi32

RegEnumKeyExA
GetUserNameA
RegOpenKeyA
RegCreateKeyA

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Remove

kernel32

SetErrorMode
GetCommandLineW
EnterCriticalSection
ExitThread
MulDiv
lstrcmpA
lstrlenA
GetProcAddress
GetLocalTime
IsBadReadPtr
GetSystemDefaultLangID
SizeofResource
IsBadHugeReadPtr
LoadLibraryExA
ExitProcess
GetCommandLineA
VirtualAllocEx
WaitForSingleObject
GetModuleHandleA
CreateThread
VirtualAlloc

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
FindTextA

shlwapi

PathFileExistsA
SHDeleteKeyA
SHEnumValueA
SHSetValueA
SHQueryInfoKeyA
SHGetValueA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc6
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc3
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc2
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

Imports

msvcrt

gdi32

version

ole32

advapi32

comctl32

kernel32

comdlg32

shlwapi

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 144KB - Virtual size: 144KB

.Rsrc8 Size: 1KB - Virtual size: 1KB

.Rsrc4 Size: 2KB - Virtual size: 1KB

.Rsrc0 Size: 2KB - Virtual size: 1KB

.Rsrc6 Size: 512B - Virtual size: 189B

.Rsrc3 Size: 1024B - Virtual size: 907B

.Rsrc2 Size: 512B - Virtual size: 313B

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 144KB - Virtual size: 144KB

.Rsrc8
Size: 1KB - Virtual size: 1KB

.Rsrc4
Size: 2KB - Virtual size: 1KB

.Rsrc0
Size: 2KB - Virtual size: 1KB

.Rsrc6
Size: 512B - Virtual size: 189B

.Rsrc3
Size: 1024B - Virtual size: 907B

.Rsrc2
Size: 512B - Virtual size: 313B

.rsrc
Size: 1024B - Virtual size: 920B