f987ec8f676c404c3ff44bbd224275cc850da1b7c9a4e481f23476bfd474d6a0

General

Target

f987ec8f676c404c3ff44bbd224275cc850da1b7c9a4e481f23476bfd474d6a0
Size

98KB
MD5

75b4a59ec2262537c11e3cf461c60cfc
SHA1

7a3f7077e7ed82704bab2e6de1b71ca7ce8a4345
SHA256

f987ec8f676c404c3ff44bbd224275cc850da1b7c9a4e481f23476bfd474d6a0
SHA512

db8fa95284252283c31c74534db63e4f7d8082f8f120d70717d4a485ad5d848eb8842c95e01bc1510aa6fe37ba6cfaeb50f1ddcff0b509daed72f748b4579c12
SSDEEP

1536:XHMuDH3hSbMG/V+ikFnZrB38Hzq/1HZ8V4oZHma:XHMuVSbM2AikFZrBsTMju4oxma

Score

N/A

Malware Config

Signatures

Files

f987ec8f676c404c3ff44bbd224275cc850da1b7c9a4e481f23476bfd474d6a0
.exe windows x86

2e471d25ff009a3f0b8c8b21fc79caca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
VirtualProtect
DeviceIoControl
GetModuleHandleA
lstrcmpA
GetModuleFileNameW
GetDiskFreeSpaceA
GetStartupInfoA
UnhandledExceptionFilter
GetLocalTime
SetHandleCount

user32

ShowOwnedPopups
GetMessageA
DispatchMessageA
PostMessageA
WaitMessage
SetClipboardData
GetSysColor
MapWindowPoints
EqualRect
GetWindowPlacement

msvcrt

_fdopen
isxdigit
_wcsicmp
_initterm
exit
__getmainargs
__p__fmode
iswctype
_XcptFilter
memcmp
_strnicmp
_acmdln
_dup
_except_handler3
_fullpath
__setusermatherr
_stat
_adjust_fdiv
sqrt
__set_app_type
__p__commode

oleaut32

GetErrorInfo
VariantCopy
SafeArrayCreate
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayUnaccessData
GetActiveObject
SysFreeString

comctl32

ImageList_DrawEx
ImageList_DragLeave
ImageList_SetOverlayImage
ImageList_SetBkColor
ImageList_GetImageCount
InitializeFlatSB
DestroyPropertySheetPage
ImageList_LoadImageA
CreatePropertySheetPageA

ole32

IIDFromString
CoGetMalloc
CoFreeUnusedLibraries
OleSetClipboard
CreateItemMoniker
ReleaseStgMedium
RegisterDragDrop
CoGetClassObject

advapi32

RegEnumKeyA
GetUserNameA
RegDeleteKeyW
IsValidSid
RegEnumValueW

shell32

Shell_NotifyIconW
DragFinish
SHBrowseForFolder
SHGetSpecialFolderPathW

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e471d25ff009a3f0b8c8b21fc79caca

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

oleaut32

comctl32

ole32

advapi32

shell32

Sections

.text Size: 68KB - Virtual size: 67KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 68KB - Virtual size: 67KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 25KB