c6df12731564952a398f7c3fe396cb0acf985b8097a7bec96b6141d2c74aa06b

Sharing

Copy URL Twitter E-mail

General

Target

c6df12731564952a398f7c3fe396cb0acf985b8097a7bec96b6141d2c74aa06b
Size

129KB
MD5

d6c439731aa3fb09cc2f7ac66ddd6be2
SHA1

3350ddf691a4cf66b564b0a52bb1b28f70194dc6
SHA256

c6df12731564952a398f7c3fe396cb0acf985b8097a7bec96b6141d2c74aa06b
SHA512

08e510bfc2893ed087831861567883f0888b8029ecbf8983bf62ed9b4dc9b85d811242182fb1f73fa1081b78ca51a9e2d102eb9fbb95ef4e12d4ab47e18280b1
SSDEEP

3072:CS3rfGfS9tHTQnYb4Tj8MtQ77lCe6uEXaZiWTd/DdoU5/h2ztvKfX7v:frEOJavVt7eXYWTd/ZoU50zB0T

Score

N/A

Malware Config

Signatures

Files

c6df12731564952a398f7c3fe396cb0acf985b8097a7bec96b6141d2c74aa06b
.exe windows x86

d005960c1242ca2e37995036a5eceb1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysStringLen
SysFreeString
SafeArrayUnaccessData
VariantCopyInd
SafeArrayGetElement
SafeArrayPtrOfIndex
VariantChangeType
SysReAllocStringLen
SafeArrayGetUBound
OleLoadPicture

shlwapi

PathGetCharTypeA
SHQueryInfoKeyA
SHDeleteValueA

kernel32

GetThreadLocale
GetUserDefaultLCID
ExitProcess
GetTickCount
GetVersion
GetCurrentThreadId
VirtualAllocEx

version

VerInstallFileA
VerFindFileA
GetFileVersionInfoA

advapi32

RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
GetLengthSid

msvcrt

clock
malloc
_acmdln
wcscspn
wcsncmp
time
wcschr

shell32

Shell_NotifyIconW
SHGetDiskFreeSpaceA

user32

IsDlgButtonChecked
SetForegroundWindow
SetMenuItemInfoA
KillTimer
SetParent
IsChild
OpenIcon
IsWindow
WindowFromPoint
SetMenu
GetCursor

comctl32

ImageList_Add
ImageList_Create
ImageList_Read
ImageList_GetBkColor
ImageList_Draw
ImageList_Destroy

gdi32

GetBitmapBits
CreateFontIndirectA
CreatePenIndirect

ole32

CoCreateFreeThreadedMarshaler
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CreateOleAdviseHolder
StgOpenStorage

Exports

Exports

pZCQzeW
J8Sl9yWOJo
VP3WII8A@12
_DhiFGz9jJiiDIg@16
KhH87PBF1@20
FgdO9QLzLUzEg
OgpSrHhYHgjF
_rzU3CgayMgfE
FpIhBMnfv
J5cGuVrxLhNsMA@24
_AU572N@20
VMYxGDWxuOn1C
_04lm3ulzcZO
_PH_YpqZvNy@4
_PswIFT@8
_xmDFYV7k0qWlp
_sCis9z3jGdVa@12
_zRgT1uzpBQ_
_daHRcb3zLXlV@8
CDfSDqYvSn9_d
_rcUMdrwokvM1D
_0VOBYBLc@12
_QYI3MOuVT
tW6bBaVxE
peqjdwGZ0jUJ
_KD9HAfy28@16
_VUWhcbrdYs@8
_CJsu4
qw6vNrB8
_Naf1hUKTI_z3_7
_XGIqb0S4MQR
_0W5iVrDSY7r_B
Wvmk86P3D5Ksw
_wnHe4FqJ4
_Qr8Iq16b@4
2ggcepjP

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d005960c1242ca2e37995036a5eceb1e

Headers

File Characteristics

Imports

oleaut32

shlwapi

kernel32

version

advapi32

msvcrt

shell32

user32

comctl32

gdi32

ole32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 107KB - Virtual size: 234KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 107KB - Virtual size: 234KB

.rsrc
Size: 5KB - Virtual size: 4KB