4d43965217cc0c2eb82d2cb70269395e2601a6cf67c89861b2ad94a1976da57b

General

Target

4d43965217cc0c2eb82d2cb70269395e2601a6cf67c89861b2ad94a1976da57b
Size

48KB
MD5

448a7f2adecef30a4c80897671dc2d10
SHA1

66868dfeb2ede6299c1a342ee5d64913b429ef55
SHA256

4d43965217cc0c2eb82d2cb70269395e2601a6cf67c89861b2ad94a1976da57b
SHA512

d58694d25c806153e956c7ca766de436452511221d684ae90966a6b8ac6e9033f0a55703fefcb7f750052b84914b40c587ebc7672db46fc99013d6d040c034c1
SSDEEP

768:F8qiy2vmhp19WQbpJfOHltwfNfMsUrnKBnUgot:F8qi3orWqpMHLk1MjrniUg

Score

N/A

Malware Config

Signatures

Files

4d43965217cc0c2eb82d2cb70269395e2601a6cf67c89861b2ad94a1976da57b
.exe windows x86

a1bfecafb54fa95603a925a665502930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetStartupInfoW
MultiByteToWideChar

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW

msvcrt

wcscpy
_wcsicmp
wcscat
_exit
strcpy
__wgetmainargs
_XcptFilter
_stricmp
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
__dllonexit
_onexit
_controlfp
memset
strcat
__setusermatherr
exit
_wcmdln
__set_app_type

comctl32

InitCommonControlsEx

sqlunirl

_MessageBox@16
_GetUnicodeRedirectionLayer@0

dtswiz

DoDTSWizard

semsfc

?LoadString@SString@@QAEHPAUHINSTANCE__@@I@Z
??1SString@@QAE@XZ
?FreeLib@SHelp@@QAEXXZ
?SetMainHelpCollection@SHelp@@QAEXPBG0@Z
?SGetWindowsPlatform@@YAIXZ
??BSString@@QBEPBGXZ
??0SString@@QAE@XZ
?SetApp@SApplication@@QAEXPAV1@@Z
??4SString@@QAEABV0@PBG@Z

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ugheodz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a1bfecafb54fa95603a925a665502930

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

comctl32

sqlunirl

dtswiz

semsfc

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 904B

.rsrc Size: 32KB - Virtual size: 32KB

ugheodz Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 904B

.rsrc
Size: 32KB - Virtual size: 32KB

ugheodz
Size: - Virtual size: 4KB