ac5c5a0b042aace4209ac1614ca3e79b869844a673aff47bdd0461ee32cdecfe

General

Target

ac5c5a0b042aace4209ac1614ca3e79b869844a673aff47bdd0461ee32cdecfe
Size

292KB
MD5

40974fb84ef9d4a77a8209564573b380
SHA1

9d908b19a94eb5bfebf6dc607f8dbce20ebae097
SHA256

ac5c5a0b042aace4209ac1614ca3e79b869844a673aff47bdd0461ee32cdecfe
SHA512

aab7d21568ec815271175565a64092e7c3c5e9e88be35de5d5dccc6f611335dc4b8d54daa1090b1ec57ecf9219f656fae0251036fe1f0f0077017d9f41d76d70
SSDEEP

6144:nIA327v8lEuaIQJH25SW7JZUFZUh2xhrgKqwch:IC27k2bIs2MW7bUFZUh2xxqwG

Score

N/A

Malware Config

Signatures

Files

ac5c5a0b042aace4209ac1614ca3e79b869844a673aff47bdd0461ee32cdecfe
.exe windows x86

8b861922ca1f9080101978e42fee7d07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetPriorityClass
WriteConsoleW
SetEvent
GetStdHandle
DisconnectNamedPipe
CreatePipe
lstrlenW
WriteConsoleW
GetModuleHandleA
GetStartupInfoA
ResumeThread
VirtualProtect
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
HeapDestroy
GetFileAttributesW
GetCommandLineA
WriteConsoleW
DeleteFileA
lstrcpyA

mmcndmgr

DllRegisterServer
DllRegisterServer
DllUnregisterServer
DllUnregisterServer

shell32

DuplicateIcon
SHGetSettings
SHGetMalloc
ExtractIconA
DragFinish
SHGetDiskFreeSpaceA
ShellAboutA
StrChrA
DragAcceptFiles
DllUnregisterServer
SHFree
DragQueryFileA
ShellMessageBoxA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b861922ca1f9080101978e42fee7d07

Headers

File Characteristics

Imports

kernel32

mmcndmgr

shell32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 264B

.rsrc Size: 285KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 177B

.impdata Size: 512B - Virtual size: 195B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 264B

.rsrc
Size: 285KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 177B

.impdata
Size: 512B - Virtual size: 195B