69f843fde62118b68ac687bc2c35defd8396060c3bfcbf77e813622cec42b0c4

General

Target

69f843fde62118b68ac687bc2c35defd8396060c3bfcbf77e813622cec42b0c4
Size

156KB
MD5

7091f987010bf053edcca6d023058a10
SHA1

7c68d320a51bdbc020db4d66615c69b3564dfd66
SHA256

69f843fde62118b68ac687bc2c35defd8396060c3bfcbf77e813622cec42b0c4
SHA512

3c93ee1a9a66b9ecd6eb74cdb084571acc8ee5b41976849abe6c6bda7731e626f233fa706bc8b179769dd6c46810f18b114ddbbd529ce6581d08d58ed6350bc8
SSDEEP

1536:X/sHpYsUhmTn0f3XgMmKZPi+OcV7ib5v:kHSsUhq0/gMJZPDs

Score

N/A

Malware Config

Signatures

Files

69f843fde62118b68ac687bc2c35defd8396060c3bfcbf77e813622cec42b0c4
.exe windows x86

12ff9e871e980879a428550d676c30cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
GetModuleHandleA
GetProcAddress
VirtualAlloc
GlobalAlloc
ReadFile
SetFilePointer
LocalFree
FreeResource
LockResource
LoadResource
FindResourceW
GetPrivateProfileStringW
GlobalSize
GlobalReAlloc
GlobalUnlock
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcmpW
GetPrivateProfileSectionW
LocalAlloc
GlobalFree
lstrcmpiW
lstrlenW
SearchPathW
FindClose
FindFirstFileW
SetLastError
GetModuleHandleW
lstrcpynW
ExpandEnvironmentStringsW
MoveFileW
EnterCriticalSection
LoadLibraryA
GetStartupInfoA
InterlockedExchange
LeaveCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
GetUserDefaultLangID
WideCharToMultiByte
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
FreeLibrary
MultiByteToWideChar
lstrlenA
SizeofResource
WaitForSingleObject
CreateThread
Sleep

user32

GetSystemMetrics
GetSysColor
LoadCursorW
MessageBoxW

gdi32

GetStockObject
GetTextMetricsW
GetObjectW
DeleteDC
CreateCompatibleDC
SetBkMode
SetTextColor
DeleteObject
CreateFontIndirectW
SelectObject

advapi32

RegOpenKeyExW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text2
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12ff9e871e980879a428550d676c30cf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 100KB - Virtual size: 99KB

.text2 Size: 20KB - Virtual size: 19KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 100KB - Virtual size: 99KB

.text2
Size: 20KB - Virtual size: 19KB