d1dbd26d38c9e86919bb863cec0ac78193506bb47c883e36bc6bdea12f2a0217

Sharing

Copy URL Twitter E-mail

General

Target

d1dbd26d38c9e86919bb863cec0ac78193506bb47c883e36bc6bdea12f2a0217
Size

160KB
MD5

20fe8af64d2d887f2b4c48be899d2b67
SHA1

8f6bf9295428e22c7094c5f95a078705e360662f
SHA256

d1dbd26d38c9e86919bb863cec0ac78193506bb47c883e36bc6bdea12f2a0217
SHA512

66f06f621d20da79cace83f499b1879f6fcb8a4cd52eee1132ad8849f8741a66bd3edccb0faecdaa8c228f6173401c756d337cc149c144848db28ebab315b54a
SSDEEP

3072:HzlHq3Yzrsb+jusJvctwP+hfdbfvnJM7Jp9navPdoqiSa:b5FA++hfd7vJMJpcvPt+

Score

N/A

Malware Config

Signatures

Files

d1dbd26d38c9e86919bb863cec0ac78193506bb47c883e36bc6bdea12f2a0217
.exe windows x86

5bb87d04044ce66e203eb9f84f5f4247

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_getch
_ismbblead
_CIsqrt
_setjmp3
_dup2
__set_app_type
_wcsicmp
__p__commode
_acmdln
_initterm
exit
remove
__lc_codepage
_XcptFilter
isdigit
_close
_onexit
_adjust_fdiv
_CIpow
sprintf
__p__fmode
__setusermatherr
_controlfp
__getmainargs
_except_handler3
log10

kernel32

GetSystemDirectoryW
Sleep
SetErrorMode
GetStringTypeA
InterlockedExchange
GetCurrentProcess
GetModuleHandleA
VirtualProtect
GetStartupInfoA
GetStdHandle
GetSystemDefaultLCID
CopyFileA

shell32

SHGetSpecialFolderPathA
CommandLineToArgvW
DoEnvironmentSubstW
SHGetSettings
ExtractIconA
SHGetFolderPathA
SHBrowseForFolderW
SHGetSpecialFolderLocation
Shell_NotifyIconW

oleaut32

SysReAllocStringLen
SafeArrayPtrOfIndex
VariantClear
VariantCopy
SafeArrayCreate
SysAllocStringByteLen
SysStringByteLen

version

VerQueryValueW
VerFindFileW
GetFileVersionInfoSizeW
VerQueryValueA
VerInstallFileW
VerLanguageNameA
GetFileVersionInfoA

ole32

CoTaskMemAlloc
IsAccelerator
DoDragDrop
OleFlushClipboard
CoInitialize

gdi32

GetMetaFileBitsEx
GetBkColor
StretchDIBits
SelectObject
PolyBezierTo
SetMapMode
CreateHalftonePalette
CreateSolidBrush
ExtSelectClipRgn
CreateDCA
GetObjectW
EndDoc
GetCharacterPlacementA
GetViewportOrgEx

user32

SetForegroundWindow
SetRect
GetScrollInfo
GetMenuState
EndDialog
GetSysColorBrush
MessageBoxA
EnableWindow
GetFocus
CheckMenuItem

comctl32

ImageList_Add
ImageList_Draw
CreateStatusWindowA
ImageList_EndDrag
ImageList_Replace
ImageList_SetOverlayImage
InitCommonControls

advapi32

RegDeleteKeyW
RegQueryInfoKeyA
OpenProcessToken
RevertToSelf
RegQueryValueExW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5bb87d04044ce66e203eb9f84f5f4247

Headers

File Characteristics

Imports

msvcrt

kernel32

shell32

oleaut32

version

ole32

gdi32

user32

comctl32

advapi32

Sections

.text Size: 19KB - Virtual size: 18KB

.data Size: 18KB - Virtual size: 41KB

.rsrc Size: 112KB - Virtual size: 111KB

.text
Size: 19KB - Virtual size: 18KB

.data
Size: 18KB - Virtual size: 41KB

.rsrc
Size: 112KB - Virtual size: 111KB