af7f951ae36fb8afdf83145c6d40987a5ec46562585edb287c370e525b921e72

Sharing

Copy URL Twitter E-mail

General

Target

af7f951ae36fb8afdf83145c6d40987a5ec46562585edb287c370e525b921e72
Size

98KB
MD5

35deb841cfae5dddc0ba51a0a6f88378
SHA1

460572ba088938ee4d54142ac904ed031c83db27
SHA256

af7f951ae36fb8afdf83145c6d40987a5ec46562585edb287c370e525b921e72
SHA512

6862597c1f60af03a3e661ef90b2f8030ee672e9b1ceb259b311287a75aaf660bcad748468f82ef9e3d697ba8c820ac1badb6b7b195b2d56d88245908af862bd
SSDEEP

1536:TRE+mYnqTva2Un6JQeE8iYZI64N5KVXU0pvCxfkFIaJQQ:DmYCa2YEcYZIJN5oU0pqKFn

Score

N/A

Malware Config

Signatures

Files

af7f951ae36fb8afdf83145c6d40987a5ec46562585edb287c370e525b921e72
.exe windows x86

f1758794aae2dc9bdabc89d64eb228b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glViewport
glRotated
glGetIntegerv
glRasterPos3d
glAreTexturesResident
glClipPlane
glCopyTexImage1D

gdi32

GetBkColor
CopyMetaFileW
ChoosePixelFormat

shlwapi

StrIsIntlEqualA
StrCSpnIA
StrRChrIW
StrRStrIA
PathQuoteSpacesW
StrToIntA
ChrCmpIA
SHRegQueryUSValueA
PathCompactPathExA
PathParseIconLocationA
PathFindOnPathW
PathCommonPrefixW
PathAddBackslashW
StrCmpNA

kernel32

VirtualQueryEx
GlobalLock
WaitForMultipleObjects
VirtualProtect
GetOEMCP
GetStringTypeA
LeaveCriticalSection
HeapAlloc
GetProcessHeap
GetCPInfoExA
ResetEvent
LocalReAlloc
HeapCompact
DeleteCriticalSection
SetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetTickCount
GetCurrentProcess
GetModuleFileNameA
VirtualAlloc
OpenEventA
TlsGetValue
ReleaseMutex
PulseEvent
GetHandleInformation
ResumeThread
TlsSetValue
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
HeapReAlloc
GetLastError
SetFilePointer
WideCharToMultiByte
GetStringTypeW
SetStdHandle
GetFileType
WriteFile
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCurrentThreadId
TlsAlloc
SetLastError
RtlUnwind
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
CloseHandle

secur32

DecryptMessage
DeleteSecurityContext
CompleteAuthToken
FreeCredentialsHandle
EncryptMessage
MakeSignature
ApplyControlToken
VerifySignature

uxtheme

GetThemeSysString

wsnmp32

ord200

cryptui

CryptUIWizDigitalSign
CryptUIWizImport
CryptUIDlgViewContext
CryptUIWizExport

setupapi

SetupGetInfFileListW
SetupDiUnremoveDevice
SetupOpenAppendInfFileA
SetupQueryFileLogW
SetupGetLineByIndexW
SetupScanFileQueueW
SetupDiEnumDriverInfoW
SetupIterateCabinetA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1758794aae2dc9bdabc89d64eb228b8

Headers

File Characteristics

Imports

opengl32

gdi32

shlwapi

kernel32

secur32

uxtheme

wsnmp32

cryptui

setupapi

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 4KB - Virtual size: 4KB