b1fd8d1c095301885a44a064e971ae3cfbda65d21860f9d0c7305e10cf86bfeb

General

Target

b1fd8d1c095301885a44a064e971ae3cfbda65d21860f9d0c7305e10cf86bfeb
Size

92KB
MD5

5e0e1ccdf7a8947d2e4e2d7a401e5276
SHA1

b082a1b48ab4704484f5d77dcff60bc3ee952a36
SHA256

b1fd8d1c095301885a44a064e971ae3cfbda65d21860f9d0c7305e10cf86bfeb
SHA512

02bed65f1bfb96accf43ed6f5122712aae78d1a966697e41f1970031d14bd9723862cf28561aa9190019ded73e569f90bc0a022f41c6cda311d294f82050e255
SSDEEP

1536:r2vMx33rc2IEwD/u/xsGdoMkXqUPnpkdWqWg13ucLk7YH88/Bm3D0FL8:6vi33fRE8sGdjkXtfpKUcYKZl8

Score

N/A

Malware Config

Signatures

Files

b1fd8d1c095301885a44a064e971ae3cfbda65d21860f9d0c7305e10cf86bfeb
.exe windows x86

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrcatA
Sleep
GetStdHandle
CloseHandle
HeapFree
GetCPInfo
SetLastError
lstrcpynA
HeapAlloc
GetFileType
lstrcpyA
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLocalTime
GetFileSize

comctl32

ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_Replace
ImageList_GetIcon
ImageList_DragEnter
ImageList_Create
ImageList_AddMasked
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_LoadImage
ImageList_Copy
ImageList_GetImageRect
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageW
ImageList_Draw

advapi32

RegLoadKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyExW
RegReplaceKeyA
RegQueryValueExA
RegEnumKeyA
RegDeleteValueA
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyW
RegLoadKeyW

user32

CalcMenuBar
DrawTextA
DialogBoxParamW
CloseWindow
DrawIconEx
DialogBoxParamA
GetWindowTextA
CopyRect
LoadCursorA
GetMenu
CopyIcon
GetCursor
IsWindow
DrawTextW
CreateIcon
GetDlgItem
AlignRects
GetDC

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.resr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.ddata Size: 24KB - Virtual size: 24KB

.odata Size: 4KB - Virtual size: 12KB

.reloc Size: - Virtual size: 3KB

.resr Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.ddata
Size: 24KB - Virtual size: 24KB

.odata
Size: 4KB - Virtual size: 12KB

.reloc
Size: - Virtual size: 3KB

.resr
Size: 2KB - Virtual size: 1KB