72ea3b55352d04c10cf7e25517ab708f0a96138f47b0c84539b41fc624082cd5

Sharing

Copy URL Twitter E-mail

General

Target

72ea3b55352d04c10cf7e25517ab708f0a96138f47b0c84539b41fc624082cd5
Size

115KB
MD5

11ba094db356aa6c3bdd0b926f9af1df
SHA1

9b4dab6562b2d8f18481ec213eeba747a604e55d
SHA256

72ea3b55352d04c10cf7e25517ab708f0a96138f47b0c84539b41fc624082cd5
SHA512

6147bba1bb09a0d213fb8563f8400e178f2146dd4a2518da03936efbe8057b9921e998501a627774ae6d0fd0e21fb906e5b2557ae2aaf39915b6c3f63a514795
SSDEEP

1536:h/iag2Au+auAJF4KQ+jhfHzSYHuvoUK+oISoxAHui/J1ULXBMWiO8QGM7Df6XwJy:h/9ggnF7ffHWYHuvoqo++B8uc7uXBu61

Score

N/A

Malware Config

Signatures

Files

72ea3b55352d04c10cf7e25517ab708f0a96138f47b0c84539b41fc624082cd5
.exe windows x86

903689ddc98f5f0c067e7821165a1b4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcmpiA
GetStdHandle
GetConsoleMode
InterlockedExchange
GetLocaleInfoW
GetCPInfo
GetACP
GetVersionExA
GetSystemTime
GetNumberFormatA
VirtualProtectEx
GetUserDefaultLangID
GetDiskFreeSpaceA
lstrcmpiW
VirtualQuery
GetUserDefaultLCID

msvcrt

__p__fmode
__set_app_type
sqrt
_initterm
calloc
_controlfp
__setusermatherr
__getmainargs
memcpy
_XcptFilter
_except_handler3
abort
__p__commode
_write
free
fputs
__p___initenv
_exit
fprintf
__dllonexit
exit
_adjust_fdiv

comdlg32

GetOpenFileNameA

user32

GetWindowLongA
InsertMenuItemA
UnregisterClassA
EnableWindow
GetCapture
OemToCharA
SetDlgItemTextA
MessageBoxA
GetSubMenu
GetSysColor
SetCursor
MessageBeep
RegisterClassA
GetDCEx
ShowOwnedPopups
WindowFromPoint

advapi32

CloseServiceHandle
CryptAcquireContextA
OpenSCManagerA
DeleteService
GetSecurityDescriptorDacl
RegFlushKey
RegCreateKeyExW
CheckTokenMembership

comctl32

ImageList_GetImageInfo
InitializeFlatSB
ImageList_DragEnter
ImageList_DragShowNolock
CreateStatusWindowA
ImageList_ReplaceIcon
ImageList_Add
ImageList_Write
ImageList_SetBkColor
ImageList_Replace
ImageList_AddMasked
ImageList_SetOverlayImage
PropertySheetW
ImageList_Read
CreatePropertySheetPageA
ImageList_Remove
ImageList_Draw
ImageList_DragLeave

ole32

CoLoadLibrary
ProgIDFromCLSID
OleInitialize
IsAccelerator
StgOpenStorageOnILockBytes
CoRegisterClassObject
CoTaskMemFree
RevokeDragDrop
CoGetInterfaceAndReleaseStream
GetRunningObjectTable
CoGetClassObject

gdi32

GetWinMetaFileBits
CloseMetaFile
GetTextMetricsW
GetNearestPaletteIndex
MoveToEx
OffsetClipRgn
CombineRgn
OffsetRgn
SetMetaFileBitsEx
GetBitmapBits

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

903689ddc98f5f0c067e7821165a1b4e

Headers

File Characteristics

Imports

kernel32

msvcrt

comdlg32

user32

advapi32

comctl32

ole32

gdi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 9KB - Virtual size: 47KB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 47KB

.rsrc
Size: 21KB - Virtual size: 21KB