a47bc22b877ac83af55383ee1419faea65a05a57c677ff486e213df36c499c28

Sharing

Copy URL

Twitter E-mail

General

Target

a47bc22b877ac83af55383ee1419faea65a05a57c677ff486e213df36c499c28
Size

129KB
MD5

e44b7b3082cbc1c98a0aea6fa56769ff
SHA1

16cc7f34d1db8d114ecee1d2632a522466b2a84e
SHA256

a47bc22b877ac83af55383ee1419faea65a05a57c677ff486e213df36c499c28
SHA512

04e009f45786ae4665d4f42c1aaf4ee5418203072d92972de135ef22e57273d0bf1396fc6099450194bbd224dfb8b12a686baa0a48a981698df6fccc176569fd
SSDEEP

3072:CS3rfGfS9tHTQnYb4Tj8MtQ77lCe6uEXaZiWTd/DdoU5/h2ztvKfXkv:frEOJavVt7eXYWTd/ZoU50zB0o

Score

N/A

Malware Config

Signatures

Files

a47bc22b877ac83af55383ee1419faea65a05a57c677ff486e213df36c499c28
.exe windows x86

d005960c1242ca2e37995036a5eceb1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysStringLen
SysFreeString
SafeArrayUnaccessData
VariantCopyInd
SafeArrayGetElement
SafeArrayPtrOfIndex
VariantChangeType
SysReAllocStringLen
SafeArrayGetUBound
OleLoadPicture

shlwapi

PathGetCharTypeA
SHQueryInfoKeyA
SHDeleteValueA

kernel32

GetThreadLocale
GetUserDefaultLCID
ExitProcess
GetTickCount
GetVersion
GetCurrentThreadId
VirtualAllocEx

version

VerInstallFileA
VerFindFileA
GetFileVersionInfoA

advapi32

RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
GetLengthSid

msvcrt

clock
malloc
_acmdln
wcscspn
wcsncmp
time
wcschr

shell32

Shell_NotifyIconW
SHGetDiskFreeSpaceA

user32

IsDlgButtonChecked
SetForegroundWindow
SetMenuItemInfoA
KillTimer
SetParent
IsChild
OpenIcon
IsWindow
WindowFromPoint
SetMenu
GetCursor

comctl32

ImageList_Add
ImageList_Create
ImageList_Read
ImageList_GetBkColor
ImageList_Draw
ImageList_Destroy

gdi32

GetBitmapBits
CreateFontIndirectA
CreatePenIndirect

ole32

CoCreateFreeThreadedMarshaler
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CreateOleAdviseHolder
StgOpenStorage

Exports

Exports

pZCQzeW
J8Sl9yWOJo
VP3WII8A@12
_DhiFGz9jJiiDIg@16
KhH87PBF1@20
FgdO9QLzLUzEg
OgpSrHhYHgjF
_rzU3CgayMgfE
FpIhBMnfv
J5cGuVrxLhNsMA@24
_AU572N@20
VMYxGDWxuOn1C
_04lm3ulzcZO
_PH_YpqZvNy@4
_PswIFT@8
_xmDFYV7k0qWlp
_sCis9z3jGdVa@12
_zRgT1uzpBQ_
_daHRcb3zLXlV@8
CDfSDqYvSn9_d
_rcUMdrwokvM1D
_0VOBYBLc@12
_QYI3MOuVT
tW6bBaVxE
peqjdwGZ0jUJ
_KD9HAfy28@16
_VUWhcbrdYs@8
_CJsu4
qw6vNrB8
_Naf1hUKTI_z3_7
_XGIqb0S4MQR
_0W5iVrDSY7r_B
Wvmk86P3D5Ksw
_wnHe4FqJ4
_Qr8Iq16b@4
2ggcepjP

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d005960c1242ca2e37995036a5eceb1e

Headers

File Characteristics

Imports

oleaut32

shlwapi

kernel32

version

advapi32

msvcrt

shell32

user32

comctl32

gdi32

ole32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 107KB - Virtual size: 234KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 107KB - Virtual size: 234KB

.rsrc
Size: 5KB - Virtual size: 4KB