36665dc1284ee62f32be6f529721ac6f1afa33f958d04b6020a1c3901b964d18

Sharing

Copy URL Twitter E-mail

General

Target

36665dc1284ee62f32be6f529721ac6f1afa33f958d04b6020a1c3901b964d18
Size

44KB
MD5

066872c10ef44374558bbff2d0cbc9a3
SHA1

140ad99c83f1865ac46cb0f678f22326fca26cb0
SHA256

36665dc1284ee62f32be6f529721ac6f1afa33f958d04b6020a1c3901b964d18
SHA512

3bc75011a9cfdf6825cc617c71003e8f319b1fc074c91003d9484cfa79b483ca48758db85f04f5396e3a4db63c4fe84913d38417ad23fd7b681aa3043a24384f
SSDEEP

768:17YpPnMFfz0gbOBvmvqKcBsh29GZFrKtocPkmtPKXQhavHGWSaSZpO:cM6gbkaqKvh29SeBkmtPYQ4b6w

Score

N/A

Malware Config

Signatures

Files

36665dc1284ee62f32be6f529721ac6f1afa33f958d04b6020a1c3901b964d18
.exe windows x86

b1d9e965440aef21dc90008e288f4b2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntmsapi

EjectDiskFromSADriveW

shell32

ShellExecuteExW

msvcrt

_initterm
_beep
_onexit
_chdir
exit
free
_purecall
wcscpy
swscanf
wcsstr
_except_handler3
iswdigit
wcslen
wcstoul
_wtol
__dllonexit
setlocale
wcsrchr
_beginthread
malloc
swprintf

ole32

CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
ReleaseStgMedium
CoUninitialize
CoInitialize
CreateStreamOnHGlobal

kernel32

GetModuleHandleW
InterlockedExchange
LoadLibraryExW
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
HeapAlloc
IsBadReadPtr
SetEvent
GetProcAddress
FreeLibrary
GetModuleHandleA
CreateEventW
GlobalFree
WaitForSingleObject
LeaveCriticalSection
GetFileAttributesW
lstrcpynW
GetWindowsDirectoryW
GetTickCount
GlobalAlloc
GetComputerNameW
LoadLibraryA
EnterCriticalSection
LocalFree
LocalAlloc
GetSystemTimeAsFileTime
Sleep
GetVersion
SetUnhandledExceptionFilter
GetProcessHeap
lstrlenW
lstrcmpW
GetModuleFileNameW
ResumeThread
SetLastError
GetCurrentProcessId
GlobalLock
DeleteCriticalSection
LoadLibraryW
GetLastError
UnhandledExceptionFilter
QueryPerformanceCounter
CloseHandle
InitializeCriticalSection
VirtualAlloc
GlobalUnlock
OutputDebugStringA

activeds

FreeADsMem

dmutil

ShowMessage

gdi32

ExtTextOutW
CreateHatchBrush
GetBkColor
DeleteObject

user32

EnableWindow
WinHelpW
KillTimer
FillRect
DestroyIcon
RegisterClipboardFormatW
GetParent
CallNextHookEx
DrawFocusRect
UnhookWindowsHookEx
CopyRect
SendMessageW
GetDesktopWindow
LoadBitmapW
PostThreadMessageW
CreatePopupMenu
SetWindowsHookExW
LoadStringW
SetTimer
AppendMenuW
PostMessageW
RedrawWindow
LoadIconW
SetWindowLongW
GetSysColor
InvalidateRect
GetWindowLongW

avifil32

AVIFileInfo

Sections

.textbss
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b1d9e965440aef21dc90008e288f4b2d

Headers

File Characteristics

Imports

ntmsapi

shell32

msvcrt

ole32

kernel32

activeds

dmutil

gdi32

user32

avifil32

Sections

.textbss Size: - Virtual size: 240KB

.idata Size: 3KB - Virtual size: 3KB

.text Size: 512B - Virtual size: 500B

.rsrc Size: 39KB - Virtual size: 120KB

.textbss
Size: - Virtual size: 240KB

.idata
Size: 3KB - Virtual size: 3KB

.text
Size: 512B - Virtual size: 500B

.rsrc
Size: 39KB - Virtual size: 120KB