dbd6fc2787f70e6953237b8357c83de2fbffd454cf022db2fea3e442f68697ca

General

Target

dbd6fc2787f70e6953237b8357c83de2fbffd454cf022db2fea3e442f68697ca
Size

100KB
MD5

44769a648f4095ca7b115cfdbbce57c0
SHA1

d2fdcf31bfed8793b6b6d7ba77384908700e6843
SHA256

dbd6fc2787f70e6953237b8357c83de2fbffd454cf022db2fea3e442f68697ca
SHA512

af23ad161d5224b66258a16c1f4d10f1682a404b2f252ee09ff43f02595f724b04593d0f289ef13a018a6d656880b62b6b2dd79999cd2c966eb7571f802ca147
SSDEEP

1536:aa6Xe9A3okpFW9frt1BKZyxvIsYWiufbJ0gcQeKuz1aKSKvBBJGmI0q2liIm:AXe9EVU9TIZ2vItcb2gcQe9z95FN4I

Score

N/A

Malware Config

Signatures

Files

dbd6fc2787f70e6953237b8357c83de2fbffd454cf022db2fea3e442f68697ca
.exe windows x86

a39be8b8b9ad09d3fa6af259ab62c229

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

TransparentBlt

kernel32

ExitProcess
GlobalAlloc
GetModuleFileNameA
GetModuleHandleA
GetCurrentThread
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetProcessVersion
Sleep
OutputDebugStringA
IsDebuggerPresent
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange

user32

GetClassNameA
CharLowerA
AdjustWindowRect
GetShellWindow

gdi32

StretchBlt
BitBlt

advapi32

RegSetValueA

msvcr80

_initterm
_initterm_e
_acmdln
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
memcpy
_configthreadlocale

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a39be8b8b9ad09d3fa6af259ab62c229

Headers

File Characteristics

Imports

msimg32

kernel32

user32

gdi32

advapi32

msvcr80

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 924B

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 4KB - Virtual size: 684B

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 924B

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 4KB - Virtual size: 684B