ac9b3c150f96f056855a904077cde64a9d6286a25cdee61527fa0afdaa0e992a

General

Target

ac9b3c150f96f056855a904077cde64a9d6286a25cdee61527fa0afdaa0e992a
Size

40KB
MD5

b643d433d073621e69c167a8e2a302ab
SHA1

b76ce4e034f3980621e9cb381ccc16a4ab0c521e
SHA256

ac9b3c150f96f056855a904077cde64a9d6286a25cdee61527fa0afdaa0e992a
SHA512

00394fd72232397b4076418a8bfbbdf5321ad060f335446a708c5f24cf39799284599941857837c94bfefc80cc9810e2e69de89f33c4bb5cea6f8cafea45adcd
SSDEEP

768:9ZamcEN0pJQO8hBSYZ0cRh6CCtgI1aT8NfywxDszX:Daa0uuYucRhneq8Fyzz

Score

N/A

Malware Config

Signatures

Files

ac9b3c150f96f056855a904077cde64a9d6286a25cdee61527fa0afdaa0e992a
.exe windows x86

1340c038c5b0b4426b3c9d7a3601aca5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DuplicateToken
CryptAcquireContextW
EqualSid
ConvertSecurityDescriptorToAccessW
CryptGetDefaultProviderA
CryptDuplicateKey
CryptHashData
CryptAcquireContextA
AddAuditAccessAce
CryptCreateHash
ConvertAccessToSecurityDescriptorA
GetSecurityDescriptorGroup
AccessCheck
GetAccessPermissionsForObjectA
GetSecurityDescriptorOwner

user32

GetWindowPlacement
TranslateAcceleratorW
UpdateWindow
GetDlgCtrlID
DestroyWindow
GetSystemMenu
SetActiveWindow
GetDlgItem
DefWindowProcW
DispatchMessageW
CheckMenuItem
OpenClipboard
PeekMessageW
CreateDialogParamW
MessageBeep

comctl32

FlatSB_GetScrollInfo
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Write
FlatSB_GetScrollRange
ImageList_DragLeave
FlatSB_GetScrollProp
GetMUILanguage
ImageList_Merge
LBItemFromPt
ImageList_GetIcon
ImageList_SetFilter
ImageList_SetFlags
GetMUILanguage
MenuHelp

kernel32

ExitProcess
GetModuleHandleW
LoadLibraryA
GetProcAddress
VirtualProtect
GlobalFree
lstrcpynW
GetLocalTime
GetLocaleInfoW
lstrcmpiW
LocalLock
lstrcatW
MapViewOfFile
GlobalUnlock
lstrcpyW

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 26KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rel
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1340c038c5b0b4426b3c9d7a3601aca5

Headers

File Characteristics

Imports

advapi32

user32

comctl32

kernel32

Sections

.code Size: 4KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 702B

.bss Size: 26KB - Virtual size: 49KB

.rel Size: 5KB - Virtual size: 13KB

.rsrc Size: 2KB - Virtual size: 2KB

.code
Size: 4KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 702B

.bss
Size: 26KB - Virtual size: 49KB

.rel
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 2KB - Virtual size: 2KB