dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7

General

Target

dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7
Size

393KB
MD5

091a332468a95142bb0d2f847b1783e0
SHA1

44b0e95b43c4fff8241c2fe93dc29cbb2805e97d
SHA256

dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7
SHA512

0f948f1fa2fdd8d540af322d1abd74d9cec60ced941321f5d0eaa86371674bc5e2de6c517e48f45d82756f01057179618f4dfed32d12d22219efb45fdb7d6e8f
SSDEEP

12288:TUAkaIfdyvnRXDKmQ7FNJO4GJ6KAkA1HzwDKQ:TPxpmNBO4GJ9Ak4H

Score

N/A

Malware Config

Signatures

Files

dfc5d2d4ef8a6851bd1b389052043613b79b3898afc4712e2d914e9ec039f8e7
.exe windows x86

ead67e3f7ac6d1803fc4d1ed19852f22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
GetStartupInfoA
GetFileAttributesW
WriteConsoleW
GetModuleHandleA
DeleteFileA
DisconnectNamedPipe
GetPriorityClass
GetCurrentDirectoryA
SetEvent
lstrlenW
VirtualProtect
GetCommandLineA
WriteConsoleW
WriteConsoleW
CreatePipe
ResumeThread
CopyFileA
lstrcpyA
GetStdHandle
HeapDestroy

mmcndmgr

DllRegisterServer
DllRegisterServer
DllUnregisterServer
DllUnregisterServer

shell32

SHGetSettings
DragAcceptFiles
DuplicateIcon
SHGetMalloc
SHGetDiskFreeSpaceA
ShellAboutA
StrChrA
ExtractIconA
SHFree
DragFinish
DllUnregisterServer
ShellMessageBoxA
DragQueryFileA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 385KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ead67e3f7ac6d1803fc4d1ed19852f22

Headers

File Characteristics

Imports

kernel32

mmcndmgr

shell32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 264B

.rsrc Size: 385KB - Virtual size: 888KB

.rdata Size: 512B - Virtual size: 151B

.impdata Size: 512B - Virtual size: 136B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 264B

.rsrc
Size: 385KB - Virtual size: 888KB

.rdata
Size: 512B - Virtual size: 151B

.impdata
Size: 512B - Virtual size: 136B