a3774e1d12d8f6987c22140f0bac16742a953062e2aa6e58069a8fb393eca069

General

Target

a3774e1d12d8f6987c22140f0bac16742a953062e2aa6e58069a8fb393eca069
Size

144KB
MD5

6755aff42a516e78024cb76e538a0fd3
SHA1

84b353862cbdfdd265a88fdf5cfb66e072f38710
SHA256

a3774e1d12d8f6987c22140f0bac16742a953062e2aa6e58069a8fb393eca069
SHA512

029208d640c8c564ecc41a4653216cf728d89ff8b7ddca1823096278e15f840aea0fc6c5976896de41002d5f907c3862195d2f1cb5dd68c0d9de3025754e8e5a
SSDEEP

3072:gdqVU6foKm8LzRv3pRhEay4+xjQW0zbFHuajPmUUBahScueuL2:PUGldEay4+xraLYuuL2

Score

N/A

Malware Config

Signatures

Files

a3774e1d12d8f6987c22140f0bac16742a953062e2aa6e58069a8fb393eca069
.exe windows x86

7ba08d23f345dfe2c814bc3bc45b0f46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
Sleep
GetACP
lstrcpyA
GetACP
GetFileAttributesA
GetACP
GetConsoleCP
GetACP
GetCPInfo
GetACP
GetStringTypeW
GetACP
WideCharToMultiByte
GetACP
lstrcmpA
GetACP
GlobalFree
lstrcatA
GetModuleHandleA
GetModuleFileNameA
ExitProcess
WideCharToMultiByte
lstrcpynA
GetStringTypeA
lstrcmpA
DeleteFileA
GlobalAlloc
GetFileAttributesA
Sleep
GetLocalTime
GetStringTypeW
GetConsoleCP
GetFileType
GetFileSize
GetCPInfo
lstrcmpiA
FreeLibrary
GetStringTypeA
GlobalFree
HeapFree
GetStringTypeW
WideCharToMultiByte
GetStdHandle
FreeLibrary
DeleteFileA
GetLastError
GetLocalTime
GetCommandLineA
GlobalAlloc
GetFileSize
lstrlenA
lstrcpynA
GetConsoleCP
ExitProcess
Sleep
GetModuleHandleA

user32

CopyIcon
AppendMenuW
GetWindowTextLengthA
DrawTextA
GetCursor
DialogBoxParamW
AlignRects
GetDC
EndDialog
BlockInput
InsertMenuA
DrawIcon
DrawTextW
LoadMenuA
CopyImage
CloseWindow
GetWindowTextA
CopyRect
GetMenu

advapi32

RegEnumValueW
RegCreateKeyExA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExW
RegEnumKeyA
RegEnumValueA
RegLoadKeyW
RegQueryValueW
RegQueryInfoKeyA
RegLoadKeyA
RegGetKeySecurity
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA
RegDeleteKeyW
RegEnumKeyExA

Sections

.tedt
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdaaa
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edada
Size: 6KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.rsac
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ba08d23f345dfe2c814bc3bc45b0f46

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.tedt Size: 19KB - Virtual size: 18KB

.rdaaa Size: 105KB - Virtual size: 105KB

.edada Size: 6KB - Virtual size: 135KB

.bss Size: - Virtual size: 3KB

.rsac Size: 9KB - Virtual size: 8KB

.tedt
Size: 19KB - Virtual size: 18KB

.rdaaa
Size: 105KB - Virtual size: 105KB

.edada
Size: 6KB - Virtual size: 135KB

.bss
Size: - Virtual size: 3KB

.rsac
Size: 9KB - Virtual size: 8KB