ad3b402996be99a0a5ded176a55df38bce7b9c7f98d5ce50e23e4f107ea19fe4

Sharing

Copy URL

Twitter E-mail

General

Target

ad3b402996be99a0a5ded176a55df38bce7b9c7f98d5ce50e23e4f107ea19fe4
Size

163KB
MD5

b32d39c85f9075ac663285ecc8de62d0
SHA1

ddc532ef711b756eb6c2a531d618f9b21dfc2ea2
SHA256

ad3b402996be99a0a5ded176a55df38bce7b9c7f98d5ce50e23e4f107ea19fe4
SHA512

b2e8df161adf8a2435303227dee881064178cc08a70d1e5b89845a9bc17dca293a48320153ba28d61305967e11d526e53bb4abd664d3d186f932083991e218c4
SSDEEP

3072:sUeZL1A1RyPOQq3vPbSesHmhEbn5hPuBPtN85ddjy/AowSRrOeYiXB9:8BOeO1N89jy/Aow9eYiXB9

Score

N/A

Malware Config

Signatures

Files

ad3b402996be99a0a5ded176a55df38bce7b9c7f98d5ce50e23e4f107ea19fe4
.exe windows x86

aee67581dc7d1f93dc904ceb0500b56b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalUnlock
GetStartupInfoA
OutputDebugStringA
lstrcpyA
SetFileAttributesW
DeviceIoControl
GetConsoleOutputCP
VirtualProtect
lstrcpynA
GetUserDefaultLCID
CreateFileMappingA
GetModuleHandleA
GetCommandLineW

user32

EqualRect
GetSysColor
CreateWindowExA
GetWindowTextA
SetCursor
GetActiveWindow
ReleaseCapture
GetScrollInfo
LoadIconA

msvcrt

log10
strstr
_itow
_initterm
__p__commode
wcscmp
_snprintf
sqrt
__set_app_type
wcschr
fflush
_adjust_fdiv
putchar
_except_handler3
__setusermatherr
__p__fmode
wcscspn
_acmdln
_XcptFilter
_stat
_umask
fread
__getmainargs
perror
exit

shell32

SHGetMalloc
SHCreateDirectoryExA
ExtractIconA
SHAddToRecentDocs
ShellExecuteA
DoEnvironmentSubstW
SHGetSpecialFolderLocation
SHGetFolderLocation
SHGetPathFromIDListW
SHGetPathFromIDList

oleaut32

VariantCopyInd
SysStringByteLen
SafeArrayRedim
CreateErrorInfo
VariantClear
SysReAllocStringLen
SafeArrayPutElement
SysAllocStringByteLen

comctl32

ImageList_Write
ImageList_GetBkColor
ImageList_Remove
ImageList_BeginDrag
ImageList_GetIcon

ole32

CreateILockBytesOnHGlobal
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
StgCreateDocfileOnILockBytes
CoGetInterfaceAndReleaseStream
CoRegisterClassObject
OleInitialize
OleIsCurrentClipboard
CLSIDFromProgID
StringFromIID
StringFromGUID2
OleSetMenuDescriptor

advapi32

SetSecurityDescriptorDacl
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExW
RegOpenKeyW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aee67581dc7d1f93dc904ceb0500b56b

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

shell32

oleaut32

comctl32

ole32

advapi32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 151KB - Virtual size: 150KB

.data Size: 6KB - Virtual size: 6KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 151KB - Virtual size: 150KB

.data
Size: 6KB - Virtual size: 6KB