e51e8a1ec1f8c1b4c20ff439aa8f1ebe4fdd4d5bce83a0715e064f5be65818f1

Sharing

Copy URL Twitter E-mail

General

Target

e51e8a1ec1f8c1b4c20ff439aa8f1ebe4fdd4d5bce83a0715e064f5be65818f1
Size

110KB
MD5

87078326f6c6de526347c6dc1b5a40d7
SHA1

35d06127a23df3530cf4aea45807d2726d0b7294
SHA256

e51e8a1ec1f8c1b4c20ff439aa8f1ebe4fdd4d5bce83a0715e064f5be65818f1
SHA512

42c054f7f1784f7478427eeb9b1739e1f608ac7fe9a3da43351c353d09ce8909dd72a03abac5fa0704ac62bacd749b15be0e8bbb58ef293d44cbe076439f0be4
SSDEEP

1536:k4hh1YHevg0ErhcbV1k8zFHgXIN53bV5X3R/E6EoYImFdmHqE3iIzC773S:k4hh1Xg3lc7kMFcIN5LvHRFwFoKKQ3S

Score

N/A

Malware Config

Signatures

Files

e51e8a1ec1f8c1b4c20ff439aa8f1ebe4fdd4d5bce83a0715e064f5be65818f1
.exe windows x86

8474298a3497aeaba48dd2918737e704

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegReplaceKeyW
RegQueryValueExW
RegReplaceKeyA
RegQueryValueA
RegEnumKeyExW
RegEnumKeyA
RegQueryValueExA
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExA
RegFlushKey
RegOpenKeyA
RegEnumKeyW
RegDeleteValueA

user32

AppendMenuW
GetWindowTextA
GetCursor
IsMenu
CalcMenuBar
DrawTextW
CopyRect
LoadMenuA
DrawIcon
BlockInput
CopyImage
DialogBoxParamW
DialogBoxParamA
LoadCursorA
GetDlgItem
InsertMenuA

kernel32

GetFileType
GetStdHandle
GetCommandLineA
GetLastError
GetStringTypeA
GetFileSize
DeleteFileA
GlobalFree
Sleep
lstrcpyA
GetCPInfo
lstrcmpA
GetLocalTime
lstrlenA
WideCharToMultiByte
HeapAlloc
FreeLibrary
lstrcatA
lstrcpynA

comctl32

ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_LoadImageW
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_GetDragImage
ImageList_Merge
ImageList_EndDrag
ImageList_Read
ImageList_GetIcon
ImageList_Copy
ImageList_DragMove
ImageList_LoadImage
ImageList_Replace
ImageList_GetImageInfo
ImageList_AddIcon

Sections

.qLawXP
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RNwPz
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.afyh
Size: 7KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CuzShI
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HUnns
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8474298a3497aeaba48dd2918737e704

Headers

File Characteristics

Imports

advapi32

user32

kernel32

comctl32

Sections

.qLawXP Size: 16KB - Virtual size: 15KB

.RNwPz Size: 28KB - Virtual size: 28KB

.afyh Size: 7KB - Virtual size: 48KB

.CuzShI Size: 1024B - Virtual size: 1KB

.HUnns Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 4KB

.qLawXP
Size: 16KB - Virtual size: 15KB

.RNwPz
Size: 28KB - Virtual size: 28KB

.afyh
Size: 7KB - Virtual size: 48KB

.CuzShI
Size: 1024B - Virtual size: 1KB

.HUnns
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 4KB