b6d33718ef9df7197727d36e44533268fd30d03510cfda641f422aa5008d9b28

General

Target

b6d33718ef9df7197727d36e44533268fd30d03510cfda641f422aa5008d9b28
Size

394KB
MD5

7839c9ed276799200ede3c2120413790
SHA1

25fffc76e0e962316bb6afbec80f41edd1a4c492
SHA256

b6d33718ef9df7197727d36e44533268fd30d03510cfda641f422aa5008d9b28
SHA512

929e47870460a6b274a48f5269313a95faa3c646ce4ed116ee7f413ab692e1d8bc45cb4864d33f0ca1f646c8dcca02d522092d896f2229a06599e7565468e52d
SSDEEP

6144:QjSe7t5+gMhceG9ZZq/kC4mh5/GmIy14fP7raRmMp9RZCuRymqebuqjtRA+t5o:QX/ZKceYvQ34C1joH7rerD+uRXbljt

Score

N/A

Malware Config

Signatures

Files

b6d33718ef9df7197727d36e44533268fd30d03510cfda641f422aa5008d9b28
.exe windows x86

005c1c871ec675ac3c91e57542e814b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

IsDebuggerPresent
GetCurrentDirectoryA
SetEvent
WriteConsoleW
WriteConsoleW
WriteConsoleW
CopyFileW
GetLastError
SuspendThread
CloseHandle
ClearCommBreak
lstrcpyW
GetStartupInfoA
GetFileAttributesA
GetStdHandle
GetModuleHandleA
DisconnectNamedPipe
GetPriorityClass
HeapCreate
CreatePipe
lstrlenW

msftedit

RichComboBoxWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichEditWndProc

shell32

DragFinish
DllUnregisterServer
DragAcceptFiles
ShellAboutA
ShellMessageBoxA
ExtractIconA
SHGetMalloc
SHGetDiskFreeSpaceA
StrChrA
SHFree
SHGetSettings
DuplicateIcon
DragQueryFileA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 385KB - Virtual size: 884KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

005c1c871ec675ac3c91e57542e814b5

Headers

File Characteristics

Imports

kernel32

msftedit

shell32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 752B

.rsrc Size: 385KB - Virtual size: 884KB

.rdata Size: 512B - Virtual size: 132B

.impdata Size: 512B - Virtual size: 80B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 752B

.rsrc
Size: 385KB - Virtual size: 884KB

.rdata
Size: 512B - Virtual size: 132B

.impdata
Size: 512B - Virtual size: 80B