fe9e1dfbb8eb141357f38968deba4f164035c5db36af6b8853b06ffb62614120

General

Target

fe9e1dfbb8eb141357f38968deba4f164035c5db36af6b8853b06ffb62614120
Size

316KB
MD5

078ff411b2e0243e67e2e3fa23c210d7
SHA1

3d4f9a36ed94aff3ea24cf41b1fffd0e44f4d82f
SHA256

fe9e1dfbb8eb141357f38968deba4f164035c5db36af6b8853b06ffb62614120
SHA512

a73535c6a67a8200d1116bcfc8d23667d8539457c53156ae69895029e68de61b0dd7fda113cd7b6a08cd5ba07648c22f27f59aedcca0f2ccad566a2b314fc844
SSDEEP

6144:8ccUb5+zh8jFC/+RfakwQaM/ufMcsdHszhpOsuaHQWgYYjROmhf:8cZ5+9YlskwQj/ufMdHupeaHQWbYjMc

Score

N/A

Malware Config

Signatures

Files

fe9e1dfbb8eb141357f38968deba4f164035c5db36af6b8853b06ffb62614120
.exe windows x86

19b6dfb8e05a5c763a3954ca98a8f594

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
CloseHandle
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
VirtualAllocEx
OpenProcess
WriteProcessMemory
VirtualProtectEx
VirtualProtect
Process32Next
Process32First
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
HeapReAlloc
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
FlushFileBuffers

user32

DialogBoxParamA
GetDlgItemTextA
GetParent
GetWindowTextLengthA
GetWindowTextA
IsWindowVisible
EndDialog
GetDlgItem
SendMessageA
EnumWindows
SetDlgItemTextA
SetWindowTextA
MessageBoxA
FindWindowA
GetWindowThreadProcessId
CheckDlgButton
LoadIconA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

19b6dfb8e05a5c763a3954ca98a8f594

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 212KB - Virtual size: 210KB

.rrdata Size: 72KB - Virtual size: 72KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 212KB - Virtual size: 210KB

.rrdata
Size: 72KB - Virtual size: 72KB