f514befffe929741e406ee589f8102b356dbb595096089a75781e277f1ede607

General

Target

f514befffe929741e406ee589f8102b356dbb595096089a75781e277f1ede607
Size

155KB
MD5

681f4deeb64d0dcbf99a3db5a438b010
SHA1

e939eba23eedae3805d5895eb362e1e4a7a2ed05
SHA256

f514befffe929741e406ee589f8102b356dbb595096089a75781e277f1ede607
SHA512

4e1b8348e62aab86e3fab80cbaacae3025356553deeadea3db7f5a5db4358e897db545507494e31fe35cbfff80d7c6b45de8e41662370c6ecb02616c8e7d177c
SSDEEP

3072:NuOkFrwdKQeV03Ecb/JLEa76HIvaMlJXg+RvUr9MG6givp:jehrVu/J1uHIaMlJxK9MG6gap

Score

N/A

Malware Config

Signatures

Files

f514befffe929741e406ee589f8102b356dbb595096089a75781e277f1ede607
.exe windows x86

5b84d7a44ef37974038ab0a2de95e5ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetFileType
IsBadReadPtr
lstrcmpiA
GlobalAlloc
VerLanguageNameA
GetStartupInfoA
GetLocaleInfoA
FreeEnvironmentStringsA
WriteFile
MulDiv
LeaveCriticalSection
CreateFileMappingA
HeapCreate
GetConsoleMode
ResetEvent
GetTickCount
FreeEnvironmentStringsW
GetModuleHandleA
FlushFileBuffers
HeapAlloc

gdi32

CreateSolidBrush
GetTextMetricsA
CreateRectRgnIndirect
Polyline
CreateRectRgn
GetObjectA
SetBkColor
RestoreDC
CreateCompatibleBitmap
CreateDIBSection
SetBkMode
CreateCompatibleDC
StartDocA
DeleteObject
SetROP2

msvcrt

_mbcasemap
_adjust_fdiv
_cexit
_wstat64
_ismbstrail
_spawnv
_wchdir
atoi
ungetc
__getmainargs
_findclose
__set_app_type
_acmdln
_wspawnlpe
vsprintf
_controlfp
exit
_getmbcp
_initterm
iswgraph
_except_handler3
_exit
_isctype
memcpy
__p__commode
_ismbbkprint
_locking
__p__fmode
clock
__setusermatherr
tmpfile
_XcptFilter
gmtime

user32

GetClientRect
CheckDlgButton
ScrollWindowEx
GetUpdateRgn
GetClassLongA
GetDlgItem
SendMessageA
AppendMenuA
DrawMenuBar
EnableWindow
SetPropA
SetClipboardData

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b84d7a44ef37974038ab0a2de95e5ca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

msvcrt

user32

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 188KB

.rsrc Size: 127KB - Virtual size: 126KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 188KB

.rsrc
Size: 127KB - Virtual size: 126KB