a1c2250ee9fd1b25a5f05ca139556b4e0278753c87fa747f7c647a4ef9474291

Sharing

Copy URL Twitter E-mail

General

Target

a1c2250ee9fd1b25a5f05ca139556b4e0278753c87fa747f7c647a4ef9474291
Size

109KB
MD5

77bd3d9583194041b9df335ac1e1b56a
SHA1

b17e8cbfeee05cdf408022d3f132ef068fbdf88d
SHA256

a1c2250ee9fd1b25a5f05ca139556b4e0278753c87fa747f7c647a4ef9474291
SHA512

c765454a7385e4f88d83da926dc7b6322bc5dd061e1d3d292e7ae2312cafa8fec82aaabb448a2bf88a47633602bf5312e09b6fbcaa0b93cd7399fe46e32c7937
SSDEEP

1536:AM5Q3EPhvwyNmtt8+FKO1FrAp0nXBi0QeBe+fnPvBKa1kbiCGpEqx+7TQp:vQU5YyNmt5KO1FrRXQK13vBK8D7EqNp

Score

N/A

Malware Config

Signatures

Files

a1c2250ee9fd1b25a5f05ca139556b4e0278753c87fa747f7c647a4ef9474291
.exe windows x86

83d7f8ee40a80d02c3757cd50a1c8268

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegReplaceKeyA
RegDeleteValueA
RegOpenKeyExW
RegCreateKeyExA
RegQueryValueA
RegReplaceKeyW
RegEnumKeyA
RegQueryInfoKeyA
RegLoadKeyA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
RegEnumKeyExW
RegQueryInfoKeyW
RegFlushKey
RegEnumKeyW
RegDeleteKeyA

comctl32

ImageList_DrawIndirect
ImageList_EndDrag
ImageList_DragLeave
ImageList_Destroy
InitCommonControls
ImageList_Copy
ImageList_GetImageInfo
ImageList_Remove
ImageList_Read
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_Create
ImageList_Replace
ImageList_GetImageRect
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_DragShowNolock

gdi32

AddFontResourceTracking
ClearBitmapAttributes
AddFontResourceW
CancelDC
DeleteObject
ExcludeClipRect
RestoreDC
AbortPath
AddFontMemResourceEx
GetPixel
AddFontResourceA
CloseFigure
CopyMetaFileA
BitBlt
GetCurrentPositionEx
CloseMetaFile
AddFontResourceExA

kernel32

CopyFileExA
GetStdHandle
CreateProcessA
GetCPInfo
ReadConsoleA
DeleteFileW
WriteFile
OpenFile
DeleteAtom
ExitThread
GlobalFree
GetComputerNameA
GetFileSize
GetFileTime
FindAtomA
Sleep
SetLastError
OpenFileMappingA
GetConsoleMode

user32

InsertMenuA
LoadCursorA
GetWindowTextLengthA
DrawIcon
GetFocus
GetWindowTextA
IsWindow
DrawTextA
CloseWindow
GetMenu
LoadMenuA
AlignRects
GetDlgItem
DrawIconEx
CreateIcon
CopyImage
DialogBoxParamA
EndDialog
IsMenu
DrawTextW
GetDC

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83d7f8ee40a80d02c3757cd50a1c8268

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 101KB - Virtual size: 187KB

.reloc Size: - Virtual size: 998B

.rsrc Size: 512B - Virtual size: 309B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 101KB - Virtual size: 187KB

.reloc
Size: - Virtual size: 998B

.rsrc
Size: 512B - Virtual size: 309B