256e84c0463d5e40d5a4bbeadeab7b785089100a5ab02203c0668a8cb142ef5f

General

Target

256e84c0463d5e40d5a4bbeadeab7b785089100a5ab02203c0668a8cb142ef5f
Size

72KB
MD5

7c96e667e91592ec3ca1fb457480ac12
SHA1

dad4a17691cb8b57e05e7a06fe396809737606d6
SHA256

256e84c0463d5e40d5a4bbeadeab7b785089100a5ab02203c0668a8cb142ef5f
SHA512

cc7644eb668d03ca6b68d5dceb8bf74edf08b5c53258b4b67898c36b8764e94b421bb37f4126e3355435b691063d4d59029666472e66423b5bd727105e399eab
SSDEEP

1536:F1VfgALKOhnI366zV0HcVAaZ9138gs7g+47F7pEG:fVfgqhn360Hcn1iWRtEG

Score

N/A

Malware Config

Signatures

Files

256e84c0463d5e40d5a4bbeadeab7b785089100a5ab02203c0668a8cb142ef5f
.exe windows x86

835846c52201a38a31bb9b83e1bd00f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MulDiv
QueryDosDeviceW
SetWaitableTimer
GetVersion
GetCurrentProcessId
LockResource
SetFilePointer
WaitForSingleObject
SetLastError
ReadFile
WriteFile
FindFirstFileW
FreeResource
CreateWaitableTimerW
FindResourceExW
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleW
VirtualAlloc
GetProcAddress
CreateProcessW
GetDriveTypeW
LoadLibraryW
FindNextChangeNotification
LoadLibraryA
GlobalFree
ReadProcessMemory
FindNextFileW
WaitForMultipleObjects
FileTimeToSystemTime
MoveFileW
SetEvent
DuplicateHandle
GetFileSize
CloseHandle
SuspendThread

user32

IsWindow
DispatchMessageW
FillRect
SetCursorPos
SetWindowTextW
PostMessageW
LoadBitmapW
EndDialog
GetWindowRect
GetSystemMetrics
TrackPopupMenu
CreateWindowExW
CreatePopupMenu
SetLayeredWindowAttributes
GetWindowThreadProcessId
DrawTextW
SetForegroundWindow
GetWindowDC
DestroyMenu
DialogBoxParamW
wsprintfW
SendMessageW
SystemParametersInfoW

gdi32

CreateDCW
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
StretchBlt
LineTo
GetDeviceCaps
GetMapMode

advapi32

RegNotifyChangeKeyValue
InitializeSecurityDescriptor
LookupAccountSidW

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

835846c52201a38a31bb9b83e1bd00f0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB