da46c44e072d44657156086df861d76eb4b067884eacb040b04a60c7d7926b23

Sharing

Copy URL Twitter E-mail

General

Target

da46c44e072d44657156086df861d76eb4b067884eacb040b04a60c7d7926b23
Size

237KB
MD5

690749c3a1cdda52430a7081714f6a85
SHA1

19e135f22af7f96b97857640685288f6622626b0
SHA256

da46c44e072d44657156086df861d76eb4b067884eacb040b04a60c7d7926b23
SHA512

b60662c8f2f1fcc294a189d5b41ac0e8c4622ae48db8050bf0960ae549878f366d0be2db99c89563a97392bc53f7c23ee7b18f317f0454ef42eba9c64b845577
SSDEEP

3072:QZIOGNITOi14eSgF4HWf+5wp9ppscwrjRXIx+j9QQXZ1qicOS2jbxWGqJscfu:icNM1BDtGwp9jscwrtNXZoQSbGqJRu

Score

N/A

Malware Config

Signatures

Files

da46c44e072d44657156086df861d76eb4b067884eacb040b04a60c7d7926b23
.exe windows x86

9249a080e099ac9e0b06b468898d0d86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
DeleteCriticalSection
HeapReAlloc
HeapAlloc
ExitProcess
SetEvent
CreateEventA

user32

LoadCursorW
GetWindowThreadProcessId
SetForegroundWindow
SendMessageTimeoutA
LoadStringA
MessageBoxA

advapi32

RegOpenKeyA

shlwapi

SHGetValueA
StrCmpIW
SHSetValueA
StrStrIA
PathRemoveFileSpecA

Sections

.rdata3
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text11
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text10
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text9
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9249a080e099ac9e0b06b468898d0d86

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.rdata3 Size: 512B - Virtual size: 200B

.rdata2 Size: 512B - Virtual size: 200B

.rdata Size: 172KB - Virtual size: 172KB

.data Size: 1024B - Virtual size: 1KB

.text Size: 4KB - Virtual size: 4KB

.text11 Size: 512B - Virtual size: 300B

.text10 Size: 512B - Virtual size: 300B

.text9 Size: 512B - Virtual size: 4B

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 512B - Virtual size: 96KB

.rdata3
Size: 512B - Virtual size: 200B

.rdata2
Size: 512B - Virtual size: 200B

.rdata
Size: 172KB - Virtual size: 172KB

.data
Size: 1024B - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.text11
Size: 512B - Virtual size: 300B

.text10
Size: 512B - Virtual size: 300B

.text9
Size: 512B - Virtual size: 4B

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 512B - Virtual size: 96KB