94ff654c4d7f294b922cf88a3ddac0207f9639ecb2dccb37b5bd6047395a0578

General

Target

94ff654c4d7f294b922cf88a3ddac0207f9639ecb2dccb37b5bd6047395a0578
Size

286KB
MD5

d007281dad238caf0653e1e2c8633ee7
SHA1

281c2b0d126113ae216f30b286935bdb0f1c070a
SHA256

94ff654c4d7f294b922cf88a3ddac0207f9639ecb2dccb37b5bd6047395a0578
SHA512

066bf5294941ac63fd15e3e68a7a3df7d6dad0dbc87f53ec5acb99874e09ed1347ed494fc320f899ca90c5fd1b21e2bd9dc238c44fb2c0588d4b97a04b7f46c9
SSDEEP

6144:hF00O4BYwPDgePEGIe6Je6i8fjgzJ1Mb1OD+Ok:/XrDZTI3Je6ipzJ+xOD

Score

N/A

Malware Config

Signatures

Files

94ff654c4d7f294b922cf88a3ddac0207f9639ecb2dccb37b5bd6047395a0578
.exe windows x86

7b35d566521bfb9e12c2aa0c775a28cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

FindAtomW
ProcessIdToSessionId
GetSystemDirectoryW
WaitForMultipleObjects
CloseHandle
InterlockedDecrement
EnterCriticalSection
SetLastError
WaitForSingleObject
GetModuleFileNameW
Sleep
FlushInstructionCache
OpenProcess
RaiseException
GetLocaleInfoW
GlobalHandle
MulDiv
DeleteCriticalSection
MultiByteToWideChar
EnumResourceLanguagesW
GetComputerNameW
GlobalUnlock
lstrlenA
InterlockedIncrement
InterlockedExchange
GlobalLock
GetTickCount
GetStringTypeW
GetProcessId
CreateThread
FormatMessageW
LocalAlloc
lstrlenW
HeapSetInformation
lstrcmpW
LeaveCriticalSection
GlobalAlloc
CreateFileW
GetCurrentProcess
InitializeCriticalSection
GlobalFree
WideCharToMultiByte

oleacc

CreateStdAccessibleObject

shlwapi

StrRetToStrA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathCreateFromUrlW

Sections

.text
Size: 147KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b35d566521bfb9e12c2aa0c775a28cb

Headers

File Characteristics

Imports

shell32

kernel32

oleacc

shlwapi

Sections

.text Size: 147KB - Virtual size: 278KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 136KB - Virtual size: 135KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 147KB - Virtual size: 278KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 136KB - Virtual size: 135KB

.rsrc
Size: 512B - Virtual size: 4KB