a3a792a942844a4b21fde8bc3e19b74457c3bb63f88b111604ffd8852ab464ae

General

Target

a3a792a942844a4b21fde8bc3e19b74457c3bb63f88b111604ffd8852ab464ae
Size

114KB
MD5

71941755e050320bab739e14dcbb45a0
SHA1

4b4aac83ad035a93d00bcabc2b3cb4c5eb204d55
SHA256

a3a792a942844a4b21fde8bc3e19b74457c3bb63f88b111604ffd8852ab464ae
SHA512

a1fb60b1fbd2968416e2a0af714ed83442a36620d97f3e7cb6eab3614942ad840ea1458d6a17b5abf09d5b06b1f75ed9aaa5e487c85f00b197888b9c026ed35d
SSDEEP

1536:W8y9sJEDdD+Xfy9Wyi8W9m1KiydIL/S0+ogH8YRPlaTTesOBmmTu6C:W8yzt+aMcW9m4ITeR8YRP6TrWg

Score

N/A

Malware Config

Signatures

Files

a3a792a942844a4b21fde8bc3e19b74457c3bb63f88b111604ffd8852ab464ae
.exe windows x86

01decb46924d9a84d7878931f97399b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteConsoleW
CloseHandle
WriteConsoleW
lstrlenW
lstrcpyW
WriteConsoleW
SetPriorityClass
GetFileSize
GetFileAttributesA
GetFileTime
HeapCreate
ReadFile
FindResourceA
IsBadStringPtrA
GetCurrentDirectoryA
GetLastError
GetModuleHandleA
IsValidLocale
GetStartupInfoA
FormatMessageA
ReleaseMutex

msftedit

RichComboBoxWndProc
SetCustomTextOutHandlerEx
RichListBoxWndProc
RichEditWndProc

clbcatq

SetSetupSave
SetupOpen
SetupOpen
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
DllGetClassObject
DllGetClassObject
CheckMemoryGates
ComPlusMigrate
SetSetupSave

dsprop

CheckADsError

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01decb46924d9a84d7878931f97399b9

Headers

File Characteristics

Imports

kernel32

msftedit

clbcatq

dsprop

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 103KB - Virtual size: 103KB

.adata Size: 1024B - Virtual size: 263B

.qedit Size: 512B - Virtual size: 240B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 103KB - Virtual size: 103KB

.adata
Size: 1024B - Virtual size: 263B

.qedit
Size: 512B - Virtual size: 240B