d3b05e7c6d95c6a2005b461e832aacd4e914ea148e7c70e0bbcb2711f5ebd562

General

Target

d3b05e7c6d95c6a2005b461e832aacd4e914ea148e7c70e0bbcb2711f5ebd562
Size

200KB
MD5

e69ef2c97daf2c6b937eb1b59abeccc5
SHA1

ef68c17580395bccebc2e0155e1fcaa174e430c5
SHA256

d3b05e7c6d95c6a2005b461e832aacd4e914ea148e7c70e0bbcb2711f5ebd562
SHA512

e43d8eee2037573866c443d58bf28c92f362369b501d9362e6f6312f3283ffb967a8484a74ce756a8eac5ffdda57ec7efc802cc1f3e8cf5cfd156c33b32325d2
SSDEEP

3072:rfu4MM9F+kc7JEB0ATas448zY5VrNjiMT9LBGzcc+oYS9D43319rPq6kA5sf8:TbHwOB5TaxM7ASF9rnkA+f

Score

N/A

Malware Config

Signatures

Files

d3b05e7c6d95c6a2005b461e832aacd4e914ea148e7c70e0bbcb2711f5ebd562
.exe windows x86

50452c9d93331ebf6d0a16821aa2b99f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyExA

user32

CheckMenuItem
DefWindowProcA
ChildWindowFromPoint
CreateMenu
DestroyIcon
DrawFrameControl
CallNextHookEx
CharLowerBuffA
BeginPaint
DefFrameProcA
CreatePopupMenu
DefMDIChildProcA
CharLowerA
CallWindowProcA
AdjustWindowRectEx
CreateIcon
CloseClipboard
CharNextA
DispatchMessageW
CharNextW
CharToOemA
DestroyWindow
DrawIcon
DrawEdge
DestroyCursor
DeleteMenu
DestroyMenu
CharUpperBuffA
ClientToScreen
DispatchMessageA

kernel32

GetCommandLineW
LoadLibraryExA
GetOEMCP
VirtualAlloc
IsBadReadPtr
GetLastError
GetModuleHandleA
ExitProcess
GetProcAddress
lstrlenW
lstrlenA

Sections

CODE
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50452c9d93331ebf6d0a16821aa2b99f

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

CODE Size: 160KB - Virtual size: 158KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 112KB

.bss Size: 4KB - Virtual size: 1KB

.hdata Size: 12KB - Virtual size: 8KB

.rsrc Size: 8KB - Virtual size: 7KB

CODE
Size: 160KB - Virtual size: 158KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 112KB

.bss
Size: 4KB - Virtual size: 1KB

.hdata
Size: 12KB - Virtual size: 8KB

.rsrc
Size: 8KB - Virtual size: 7KB