a5cda9429ee2e08096d6fa76832027f5a87d16a5d691823bdc43eb550434e04d

Sharing

Copy URL Twitter E-mail

General

Target

a5cda9429ee2e08096d6fa76832027f5a87d16a5d691823bdc43eb550434e04d
Size

218KB
MD5

a830e8d78a705a9452625b46ed066048
SHA1

58f8a2ecbdb01dbede00efee2c4bd7bd94f7e48a
SHA256

a5cda9429ee2e08096d6fa76832027f5a87d16a5d691823bdc43eb550434e04d
SHA512

07987154fdce5508f8ebd9bd9f14841e289e7a32c1eaf1771802c62ddfb7becff3ac6de95f09d1d36eb164b17b35c8e1dee7a58db3e85c526b55c1be7276ffc5
SSDEEP

6144:XHDI3UJ1rCshMTILGty174K66mno4U6S:XjI3cNCs6ULfn66mno4UP

Score

N/A

Malware Config

Signatures

Files

a5cda9429ee2e08096d6fa76832027f5a87d16a5d691823bdc43eb550434e04d
.exe windows x86

1d286c77bbe013eee8d706b5818c52e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysReAllocStringLen
SafeArrayCreate
VariantChangeType
SafeArrayPtrOfIndex
SysFreeString
OleLoadPicture
RegisterTypeLib
SafeArrayUnaccessData
SafeArrayGetElement

comctl32

ImageList_Write
ImageList_DragShowNolock
ImageList_Add

shell32

SHGetFolderPathA
DragQueryFileA

version

VerInstallFileA
VerQueryValueA

user32

DefWindowProcA
WaitMessage

gdi32

GetObjectA
GetDCOrgEx
SetBkMode
GetPixel
GetClipBox
GetDIBits

shlwapi

PathIsContentTypeA
SHQueryInfoKeyA
SHStrDupA
SHEnumValueA

advapi32

RegOpenKeyA

kernel32

EnterCriticalSection
GetCommandLineA
IsBadReadPtr
GetCommandLineW
GetProcAddress
GetTickCount
SetLastError
ExitThread
LoadLibraryA
GetACP
ExitProcess
VirtualAllocEx
FindFirstFileA
GetVersionExA
GetModuleHandleA
GlobalAlloc
MoveFileA
VirtualAlloc
GetThreadLocale
lstrcmpiA
GetOEMCP
LocalAlloc

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC8
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC0
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d286c77bbe013eee8d706b5818c52e5

Headers

File Characteristics

Imports

oleaut32

comctl32

shell32

version

user32

gdi32

shlwapi

advapi32

kernel32

Sections

.text Size: 65KB - Virtual size: 65KB

DATA Size: 141KB - Virtual size: 141KB

.RSRC8 Size: 2KB - Virtual size: 1KB

.RSRC4 Size: 1KB - Virtual size: 1KB

.RSRC0 Size: 1024B - Virtual size: 992B

.RSRC6 Size: 1024B - Virtual size: 998B

.RSRC3 Size: 1KB - Virtual size: 1KB

.RSRC1 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 924B

.text
Size: 65KB - Virtual size: 65KB

DATA
Size: 141KB - Virtual size: 141KB

.RSRC8
Size: 2KB - Virtual size: 1KB

.RSRC4
Size: 1KB - Virtual size: 1KB

.RSRC0
Size: 1024B - Virtual size: 992B

.RSRC6
Size: 1024B - Virtual size: 998B

.RSRC3
Size: 1KB - Virtual size: 1KB

.RSRC1
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 924B