5a0e867d3425a538b1fcf0e08688d68025e6db8164936661bdc214ec7437d209

Sharing

Copy URL Twitter E-mail

General

Target

5a0e867d3425a538b1fcf0e08688d68025e6db8164936661bdc214ec7437d209
Size

141KB
MD5

99409ad32ed3a2b32073e3d7a3de6a46
SHA1

6dea7e2badd7651d66e62c974993fc05f990a251
SHA256

5a0e867d3425a538b1fcf0e08688d68025e6db8164936661bdc214ec7437d209
SHA512

314de6d6ab46b46fb5f3cccf837cc0398fdea9a8d05dd528b3eab2bf2145c7eca4fa8933248990a4cbd056eb3871015f881deaeaafe93908f5738c6e5b3fd0d0
SSDEEP

3072:YYNtyY5Nbbp5IQ6J5DKfTK95UUj/4jzBllm:YGyY5BOnmfO1gHm

Score

N/A

Malware Config

Signatures

Files

5a0e867d3425a538b1fcf0e08688d68025e6db8164936661bdc214ec7437d209
.exe windows x86

9ec66ad02064d492ef4fbb81b8feb351

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCanonicalizeA
PathIsPrefixW
PathMatchSpecW
PathParseIconLocationW
StrStrIW
UrlGetLocationW

gdi32

FillPath
GetCurrentPositionEx

mapi32

ord72
ord11
ord128
ord185

mscms

CreateProfileFromLogColorSpaceW
GetCountColorProfileElements
UninstallColorProfileA

shell32

DragQueryFileA
SHGetFileInfoW
ShellAboutW
ShellExecuteExA
ShellHookProc
Shell_NotifyIconA

mpr

WNetCancelConnection2W
WNetGetResourceInformationW
WNetOpenEnumA

user32

CheckDlgButton
CheckMenuItem
CloseClipboard
CreateWindowExW
DefWindowProcW
DestroyWindow
DialogBoxParamW
DispatchMessageW
EmptyClipboard
EnableMenuItem
EndDialog
GetCapture
GetClientRect
GetCursorPos
GetDC
GetDlgItem
GetMenu
GetMessageW
GetWindowTextLengthW
GetWindowTextW
InvertRect
IsDlgButtonChecked
IsWindowVisible
LoadAcceleratorsW
LoadCursorW
LoadStringW
MessageBoxW
MoveWindow
OpenClipboard
PostQuitMessage
RegisterClassW
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetFocus
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UpdateWindow
wsprintfW

kernel32

CloseHandle
CreateFileW
CreateProcessW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemCodePagesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileSize
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrlenW

comctl32

CreateStatusWindowW
CreateToolbarEx
ord17

advapi32

RegCloseKey
RegCreateKeyW
RegEnumKeyW
RegEnumValueW
RegGetValueW
RegOpenKeyW
RegQueryValueW
RegSetValueExW

ole32

CLSIDFromString
CoCreateInstance
CoCreateInstanceEx
OleInitialize
OleUninitialize
StringFromGUID2

comdlg32

GetOpenFileNameW
GetSaveFileNameW

oleaut32

LoadTypeLi
SysFreeString
SysStringLen
VariantChangeType
VariantInit

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ec66ad02064d492ef4fbb81b8feb351

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

gdi32

mapi32

mscms

shell32

mpr

user32

kernel32

comctl32

advapi32

ole32

comdlg32

oleaut32

Sections

.text Size: 107KB - Virtual size: 106KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 2KB - Virtual size: 7KB

.00cfg Size: 512B - Virtual size: 8B

.rsrc Size: 512B - Virtual size: 424B

.text
Size: 107KB - Virtual size: 106KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 2KB - Virtual size: 7KB

.00cfg
Size: 512B - Virtual size: 8B

.rsrc
Size: 512B - Virtual size: 424B