aa406bf035a33403ee3db38b3ae1ba9e6644cdd18c5de8d665b8fc8af7829bac

Sharing

Copy URL Twitter E-mail

General

Target

aa406bf035a33403ee3db38b3ae1ba9e6644cdd18c5de8d665b8fc8af7829bac
Size

277KB
MD5

5df4a0b71156f59f5ade2c626e156a47
SHA1

221d6d25e8d5b0648438493be38316a9bf8d4680
SHA256

aa406bf035a33403ee3db38b3ae1ba9e6644cdd18c5de8d665b8fc8af7829bac
SHA512

19b9b6942edc9bc05711b66996454f1e159aefc813694e4f49a945e480e783f5fc216d880d17eabd1d3ee9e0b98e07a38e1c2a9ba11bd1beacdddea3d6a634b3
SSDEEP

6144:bxW0KmxJkyF38G+SKCYSWdMzZScahC+x/6G+Lubma7hA:bR9JkQ38SK1SW085C+RZm

Score

N/A

Malware Config

Signatures

Files

aa406bf035a33403ee3db38b3ae1ba9e6644cdd18c5de8d665b8fc8af7829bac
.dll windows x86

2d688c71bd2681311d8e704cabb9c687

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameA
ChooseColorA
GetOpenFileNameA

shlwapi

SHQueryValueExA
SHGetValueA
SHSetValueA
SHQueryInfoKeyA

oleaut32

SysReAllocStringLen
VariantChangeType
VariantCopyInd
SysFreeString
SafeArrayGetUBound
OleLoadPicture
SysAllocStringLen

msvcrt

time

user32

UnhookWindowsHookEx
DestroyCursor
GetSystemMetrics
ChildWindowFromPoint
EnumChildWindows
SetWindowPos
SetWindowTextA
GetMenuStringA
CharToOemA
SetRect
MoveWindow
RegisterClipboardFormatA
GetDC
GetKeyboardLayout
PostQuitMessage
BeginPaint
MapVirtualKeyA
GetKeyboardState
CreateIcon
GetActiveWindow
GetMenuState

kernel32

GetCommandLineW
LoadLibraryExA
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleFileNameA
WideCharToMultiByte
GetModuleHandleA
VirtualAlloc
HeapAlloc
GetProcessHeap
GetLastError
ExitThread
GetTickCount
GetOEMCP
ExitProcess
GetCurrentThreadId
EnterCriticalSection

Sections

CODE
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d688c71bd2681311d8e704cabb9c687

Headers

File Characteristics

Imports

comdlg32

shlwapi

oleaut32

msvcrt

user32

kernel32

Sections

CODE Size: 83KB - Virtual size: 83KB

.rdata Size: 512B - Virtual size: 421B

.data Size: 11KB - Virtual size: 91KB

BSS Size: 169KB - Virtual size: 168KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 2KB - Virtual size: 1KB

CODE
Size: 83KB - Virtual size: 83KB

.rdata
Size: 512B - Virtual size: 421B

.data
Size: 11KB - Virtual size: 91KB

BSS
Size: 169KB - Virtual size: 168KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 2KB - Virtual size: 1KB