c9e8a5d12e4b4f729d903534354596c539dc26c84677e00600a5f987302acbed

Sharing

Copy URL Twitter E-mail

General

Target

c9e8a5d12e4b4f729d903534354596c539dc26c84677e00600a5f987302acbed
Size

174KB
MD5

e67a42ff03884ea1ab181cfa8d956843
SHA1

73a6f45ba20baa9480b947ec20d67fa5850a39e5
SHA256

c9e8a5d12e4b4f729d903534354596c539dc26c84677e00600a5f987302acbed
SHA512

e0c9124dbc856cac86e5e5e99f98ba8fd04969411dfb336151110331815db117dafda61eda7a4db2e456fbb3b20f6bce9bf8c5f61403e13c621a7671cb9aca27
SSDEEP

3072:k8ulw2hXBdOrWo22bDJM6Z2pNKI0urCbXmuPaLSKHesYYNxHxpn2lOq72pO6QhWN:kzlw25tpGJ3yNKIVaXmuPaLSK+sYm/0U

Score

N/A

Malware Config

Signatures

Files

c9e8a5d12e4b4f729d903534354596c539dc26c84677e00600a5f987302acbed
.exe windows x86

7417894d02119289bc039b26b13b7536

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantInit
SysAllocStringLen

msvcrt

_cexit
_unlock
fclose
_stricmp
_acmdln

comctl32

ImageList_Create
ImageList_Destroy
ImageList_EndDrag

shlwapi

PathFindFileNameW

ole32

StringFromGUID2
OleUninitialize

ntdll

NtOpenSection
NtOpenEventPair
NtReleaseMutant
NtOpenSemaphore
NtQueryMutant
NtOpenMutant
NtQueryInformationFile
NtQuerySection

user32

InvalidateRgn
GetActiveWindow
TrackPopupMenuEx
GetFocus
GetClassNameW
SetRectEmpty
GetClientRect
GetSubMenu
SetCursor
SetProcessDefaultLayout
InsertMenuW
SetWindowPos
RegisterClassExW
MonitorFromPoint
EnableMenuItem
EnableWindow
IsWindow
CreateWindowExW
RegisterWindowMessageW

gdi32

GetTextExtentPoint32W
SelectObject
SetBkMode

ifmonepr

_Tolower
_Stod
_Strxfrm
_Eps
_Dnorm
_FDtest
_Stold
_LCosh

shell32

SHCreateShellItem
ord155

kernel32

CreateThread
HeapFree
WaitForSingleObject
EnumUILanguagesW
TerminateProcess
SleepEx
GetModuleHandleW
LocalFree
FindClose
VirtualProtect
GetACP
GetCurrentThread
GlobalAlloc
RaiseException
LocalAlloc
GetVersionExA
CloseHandle
InterlockedExchangeAdd
GetPriorityClass
EnterCriticalSection
GetShortPathNameW
LocalAlloc
GetCurrentProcess

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7417894d02119289bc039b26b13b7536

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

msvcrt

comctl32

shlwapi

ole32

ntdll

user32

gdi32

ifmonepr

shell32

kernel32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 39KB - Virtual size: 39KB

.rsrc Size: 114KB - Virtual size: 116KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 114KB - Virtual size: 116KB