4379b9c25dd6dd1cc1de6a34d84db383d5454f369e813e36691d654c6f8d1c85

General

Target

4379b9c25dd6dd1cc1de6a34d84db383d5454f369e813e36691d654c6f8d1c85
Size

491KB
MD5

67cd4f8764fa076305be4b11ae548f00
SHA1

0f44bf6d9b50af565e4e783f6948d84d310f1ed5
SHA256

4379b9c25dd6dd1cc1de6a34d84db383d5454f369e813e36691d654c6f8d1c85
SHA512

e0a34f7c3e840018b4b2281548775563258de9562c42b662085d2d579c0a86e7b0e6582ca1e56e213cd0b70bea623127aa0e7b92a475ccf6af85eea97810c0eb
SSDEEP

12288:P0zP7mT/K1267W2/W0NPaNtXHeUHf4uJszAn1du:Wq/WF7W2/PCNhHe+Jszd

Score

N/A

Malware Config

Signatures

Files

4379b9c25dd6dd1cc1de6a34d84db383d5454f369e813e36691d654c6f8d1c85
.exe windows x86

28a3e7c4db37c06c6f816b609d2a6530

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

kernel32

CopyFileW
LCMapStringW
IsBadReadPtr
IsBadWritePtr
GetSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateFileA
InterlockedExchange
SetDllDirectoryA
HeapSize
HeapReAlloc
HeapFree
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindClose
InitializeCriticalSection
FindNextFileW
InterlockedDecrement

advapi32

CloseEventLog
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey

gdi32

DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
PatBlt
CreatePatternBrush
CreateBitmap
GetFontData
DeleteDC
StretchBlt
SetBrushOrgEx
SetStretchBltMode
ExtTextOutW
SetBkColor
GetDeviceCaps
MoveToEx
LineTo
TextOutW
SetTextColor
ExtCreatePen
GetTextExtentPointW
SetBkMode
SelectObject
GetTextExtentPoint32W
GetTextMetricsW
BitBlt

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28a3e7c4db37c06c6f816b609d2a6530

Headers

File Characteristics

Imports

rpcrt4

kernel32

advapi32

gdi32

Sections

.text Size: 265KB - Virtual size: 265KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 124KB - Virtual size: 386KB

.reloc Size: 98KB - Virtual size: 100KB

.text
Size: 265KB - Virtual size: 265KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 124KB - Virtual size: 386KB

.reloc
Size: 98KB - Virtual size: 100KB