8f6741d9c9765d8d3fb8f66460a1472f9f1be08f30d15c8a3995f344335821b4

Sharing

Copy URL Twitter E-mail

General

Target

8f6741d9c9765d8d3fb8f66460a1472f9f1be08f30d15c8a3995f344335821b4
Size

206KB
MD5

591290b04edb50edd1a6a5fba1e214a6
SHA1

0d6a980a4f9bcc2ee0f423c05ef1581524009114
SHA256

8f6741d9c9765d8d3fb8f66460a1472f9f1be08f30d15c8a3995f344335821b4
SHA512

89a39a7eb936703c75ee02ca184279c30b6d376703deeb144b648c5e9122082a8057b119f324a085a8a283788333e9be3992eda8dc9e06fa6943ded2696d3f28
SSDEEP

6144:jKlaJBQHuC9JyW4e5SJzkiPfYlk+waH4D:NBQX9JyjeOdnYltp4D

Score

N/A

Malware Config

Signatures

Files

8f6741d9c9765d8d3fb8f66460a1472f9f1be08f30d15c8a3995f344335821b4
.exe windows x86

3ec6af4f6b9c2b409eb863bb44c7dbaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StringFromIID
CoGetObjectContext
CoFreeUnusedLibraries
CoUnmarshalInterface
CoDisconnectObject
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoGetMalloc
CreateBindCtx

advapi32

RegLoadKeyA

version

VerQueryValueA
VerInstallFileA

kernel32

GetLastError
VirtualAlloc
VirtualAllocEx
GetModuleHandleA
GetProcAddress
ExitThread
LoadLibraryA
IsBadReadPtr
GetVersionExA
ExitProcess
LoadLibraryExA

user32

CallNextHookEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
ChooseColorA

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 802B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res9
Size: 2KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res0
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res6
Size: 1024B - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res3
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ec6af4f6b9c2b409eb863bb44c7dbaa

Headers

File Characteristics

Imports

ole32

advapi32

version

kernel32

user32

comdlg32

Sections

.text Size: 182KB - Virtual size: 181KB

DATA Size: 1024B - Virtual size: 802B

.res9 Size: 2KB - Virtual size: 33KB

.res4 Size: 1KB - Virtual size: 1KB

.res0 Size: 13KB - Virtual size: 13KB

.res6 Size: 1024B - Virtual size: 774B

.res3 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 1024B

.text
Size: 182KB - Virtual size: 181KB

DATA
Size: 1024B - Virtual size: 802B

.res9
Size: 2KB - Virtual size: 33KB

.res4
Size: 1KB - Virtual size: 1KB

.res0
Size: 13KB - Virtual size: 13KB

.res6
Size: 1024B - Virtual size: 774B

.res3
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 1024B