a5bb4513297aef9c31a5cc831d5a95d9a8ebc45c011a841abce7ea33221b395a

Sharing

Copy URL Twitter E-mail

General

Target

a5bb4513297aef9c31a5cc831d5a95d9a8ebc45c011a841abce7ea33221b395a
Size

82KB
MD5

3c988fd7f62406313587c36580bf205e
SHA1

4fc9c058a999e946f8ca954a994b93cebe1c8cbe
SHA256

a5bb4513297aef9c31a5cc831d5a95d9a8ebc45c011a841abce7ea33221b395a
SHA512

e37d588fe7b08255a46a0eb16d3c0d045a036d25f2cef5a03bbddd3395b97650a85112c293c133343abbc57a8ecd1b48a69b6b83ff25c4361d8912d014689de4
SSDEEP

1536:wVj5QQxOHrww1ZHIS9nJdMslB+jXm8sbtCZ+WuWARlFJu1jMv:wHQhL11ZoMJdMslB+jXmpJCAWQlFJqq

Score

N/A

Malware Config

Signatures

Files

a5bb4513297aef9c31a5cc831d5a95d9a8ebc45c011a841abce7ea33221b395a
.exe windows x86

8b9d6a89da30038926e99af53b8627a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetMessageA
GetSysColor
SetWindowPos
GetSubMenu
EnableMenuItem
PostQuitMessage
SetWindowTextA
EqualRect
FrameRect
GetSysColorBrush
UnhookWindowsHookEx
GetScrollPos
EnumWindows

kernel32

VirtualAllocEx
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetStartupInfoA
ExitProcess
GetTickCount
FileTimeToSystemTime
GetFileAttributesA
GetACP
GetCurrentProcessId
GetOEMCP
GetThreadLocale
GetTempPathA
RtlUnwind
QueryPerformanceCounter
InterlockedExchange

gdi32

CopyEnhMetaFileA
GetMapMode
FillRgn
CreateCompatibleBitmap
CreateICW
DPtoLP
SetViewportExtEx
SelectClipPath
ExcludeClipRect

ole32

CoInitializeSecurity
CoRevokeClassObject
CoTaskMemRealloc
CoInitialize
DoDragDrop
OleRun
StringFromGUID2
StgOpenStorage
CoCreateInstance

advapi32

CryptHashData
GetSecurityDescriptorDacl
CheckTokenMembership
GetUserNameA
RegQueryValueExW
RegCreateKeyA
AdjustTokenPrivileges
RegCreateKeyExW
FreeSid
QueryServiceStatus

msvcrt

puts
_flsbuf
fprintf
__getmainargs
strlen
_fdopen
strncpy
raise
__initenv
_CIpow
strcspn
_mbscmp
signal
__setusermatherr
_lock
iswspace
fflush
_strdup

comctl32

ImageList_ReplaceIcon
ImageList_Destroy
ImageList_LoadImageW
CreatePropertySheetPageA
ImageList_Write
ImageList_SetIconSize
InitCommonControls
ImageList_DragEnter
ImageList_GetBkColor
ImageList_GetIconSize
ImageList_DrawEx
ImageList_LoadImageA
ImageList_GetIcon

shell32

ShellExecuteW
SHGetPathFromIDList
ExtractIconExW
DoEnvironmentSubstW
DragQueryFileW
ShellExecuteEx
CommandLineToArgvW
DragAcceptFiles
DragQueryFileA
SHBrowseForFolderA
ExtractIconW

oleaut32

SysReAllocStringLen
SafeArrayPtrOfIndex
SafeArrayRedim
SafeArrayPutElement
VariantCopy
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayCreate

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

leskplo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b9d6a89da30038926e99af53b8627a9

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ole32

advapi32

msvcrt

comctl32

shell32

oleaut32

Sections

.text Size: 33KB - Virtual size: 33KB

.data Size: 41KB - Virtual size: 41KB

.rsrc Size: 6KB - Virtual size: 34KB

leskplo Size: - Virtual size: 4KB

.text
Size: 33KB - Virtual size: 33KB

.data
Size: 41KB - Virtual size: 41KB

.rsrc
Size: 6KB - Virtual size: 34KB

leskplo
Size: - Virtual size: 4KB