4d3f2d38ac4000b9768f64b93e9a1b2af5f546130d991c6206bafcf176ad1763

General

Target

4d3f2d38ac4000b9768f64b93e9a1b2af5f546130d991c6206bafcf176ad1763
Size

40KB
MD5

dd47f31dda2fe07efc8c634a8a777a68
SHA1

72a6181be07cf2b9bc669ead3ddc9c1fa122febc
SHA256

4d3f2d38ac4000b9768f64b93e9a1b2af5f546130d991c6206bafcf176ad1763
SHA512

6b9c13c83e6be4b8313a4be5c89275f2458ff94a630d6c7f8c4771c4d7c13777f6cae838b51c3350aa3c179db5e49ffc5c3addb1109765468a5402b5e29e329d
SSDEEP

768:f8VEb41/V/rugcp+yE7mX+qD/e5DopZSxGdLhsC9l7PAb34agu:Ua4n/ifp+zmOy4D9x0eCDPtu

Score

N/A

Malware Config

Signatures

Files

4d3f2d38ac4000b9768f64b93e9a1b2af5f546130d991c6206bafcf176ad1763
.exe windows x86

738666549654a5d63b6b46c4979daa83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
lstrcpyW
InitializeCriticalSection
GetCPInfo
CreateEventW
GetCurrentProcessId
HeapFree
lstrcpynW
GetSystemInfo
GlobalSize
FindClose
VirtualAlloc
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetTickCount
HeapSize
LCMapStringW
LCMapStringA
VirtualProtect
GetLocaleInfoA
VirtualQuery
InterlockedExchange
RtlUnwind
IsBadWritePtr
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
MultiByteToWideChar
GetSystemTimeAsFileTime

user32

EnableWindow
SetScrollInfo
BeginDeferWindowPos
DrawFocusRect

comdlg32

FindTextA
ReplaceTextW
ChooseColorW
PageSetupDlgA
GetOpenFileNameA
GetFileTitleW
FindTextW
GetSaveFileNameW

ole32

StgOpenAsyncDocfileOnIFillLockBytes

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

738666549654a5d63b6b46c4979daa83

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

ole32

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 82KB - Virtual size: 122KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 82KB - Virtual size: 122KB

.rsrc
Size: 4KB - Virtual size: 4KB