6f13c0a3b6aadf7ac611ba0a7df0a0821cd9be316a083dd7188e8d6ab45e9ca5

Sharing

Copy URL Twitter E-mail

General

Target

6f13c0a3b6aadf7ac611ba0a7df0a0821cd9be316a083dd7188e8d6ab45e9ca5
Size

212KB
MD5

2aec71721a3cb3886a81065ce98defd0
SHA1

873cb68847d4c5809e42db25f5717d979c381655
SHA256

6f13c0a3b6aadf7ac611ba0a7df0a0821cd9be316a083dd7188e8d6ab45e9ca5
SHA512

fa7b521ae8a8159a6e57be3a59d74ba5130e4cb9939924b84fb9fc08eec12f259fd2ee105aafa1dd4d2eafbd586d808aed9900ba2ed3144bda5913fb33556337
SSDEEP

3072:Bp9qJ0imqb+oSyLytqMxuud33XcGXsYQYlLBdvFkGGut+6a1hdYQllI18+EVVS:Bp9qmihbz1yjxXncGXFQYp/Gu0Dhdd

Score

N/A

Malware Config

Signatures

Files

6f13c0a3b6aadf7ac611ba0a7df0a0821cd9be316a083dd7188e8d6ab45e9ca5
.exe windows x86

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

msvcrt

acos
atol

gdi32

CreateDIBitmap
GetDIBits
CreatePalette
CreateBrushIndirect
SetPixel
CreateDIBSection
SetBkColor
CopyEnhMetaFileA

version

VerInstallFileA
GetFileVersionInfoSizeA
VerQueryValueA

ole32

WriteClassStm
CLSIDFromString
CreateOleAdviseHolder
CLSIDFromProgID
GetHGlobalFromStream
CoTaskMemFree
CoDisconnectObject
MkParseDisplayName
StringFromIID

advapi32

RegEnumKeyExA
GetUserNameA
RegOpenKeyA
RegCreateKeyA

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Remove

kernel32

SetErrorMode
GetCommandLineW
EnterCriticalSection
ExitThread
MulDiv
lstrcmpA
lstrlenA
GetProcAddress
GetLocalTime
IsBadReadPtr
GetSystemDefaultLangID
SizeofResource
IsBadHugeReadPtr
LoadLibraryExA
ExitProcess
GetCommandLineA
VirtualAllocEx
WaitForSingleObject
GetModuleHandleA
CreateThread
VirtualAlloc

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
FindTextA

shlwapi

PathFileExistsA
SHDeleteKeyA
SHEnumValueA
SHSetValueA
SHQueryInfoKeyA
SHGetValueA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc6
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rsrc3
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Rsrc2
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b9fc6be1061f89984765b9b2da1e31c

Headers

File Characteristics

Imports

msvcrt

gdi32

version

ole32

advapi32

comctl32

kernel32

comdlg32

shlwapi

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 144KB - Virtual size: 144KB

.Rsrc8 Size: 1KB - Virtual size: 1KB

.Rsrc4 Size: 2KB - Virtual size: 1KB

.Rsrc0 Size: 2KB - Virtual size: 1KB

.Rsrc6 Size: 512B - Virtual size: 189B

.Rsrc3 Size: 1024B - Virtual size: 907B

.Rsrc2 Size: 512B - Virtual size: 313B

.rsrc Size: 1024B - Virtual size: 920B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 144KB - Virtual size: 144KB

.Rsrc8
Size: 1KB - Virtual size: 1KB

.Rsrc4
Size: 2KB - Virtual size: 1KB

.Rsrc0
Size: 2KB - Virtual size: 1KB

.Rsrc6
Size: 512B - Virtual size: 189B

.Rsrc3
Size: 1024B - Virtual size: 907B

.Rsrc2
Size: 512B - Virtual size: 313B

.rsrc
Size: 1024B - Virtual size: 920B