b1b18a797fbb45254cf48e33d0f7e8bc95e55e3c61d04f1a202e3fa10bf538e4

General

Target

b1b18a797fbb45254cf48e33d0f7e8bc95e55e3c61d04f1a202e3fa10bf538e4
Size

168KB
MD5

5266764fcac7768cdf821d362a69faf0
SHA1

c4b4e8618bc3311b2d1768c304882b81ff00db55
SHA256

b1b18a797fbb45254cf48e33d0f7e8bc95e55e3c61d04f1a202e3fa10bf538e4
SHA512

18f44be1bbb6d34a0d77d6a2710ebe4898c633d850d326035f2ad4125773e0adfc16b13b79486092de0aa925b5bf505bbbb6dc0f38973a060ff5677c6be05e44
SSDEEP

3072:qgM/dxQ6GTM/F/DyTdLE/tTLa9w3GhDfQqM:ql5wM/FDypQhO9dM

Score

N/A

Malware Config

Signatures

Files

b1b18a797fbb45254cf48e33d0f7e8bc95e55e3c61d04f1a202e3fa10bf538e4
.exe windows x86

7abe052f4397d644c2fcf80f1483f9e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2621
ord1134
ord2982
ord1168
ord4234
ord2379
ord755
ord470
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord823
ord825
ord4673
ord1576

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_setmbcp
_controlfp

kernel32

ReadFile
CloseHandle
EndUpdateResourceA
GetFileSize
CreateFileA
GetSystemDirectoryA
UpdateResourceA
BeginUpdateResourceA
GetProcAddress
LoadLibraryA
LoadResource
FindResourceA
WriteFile
FreeLibrary
ExitProcess
GetCommandLineA
SetFileTime
GetFileTime
Sleep
GetModuleHandleA
GetStartupInfoA
GetTickCount

user32

EnumWindows
SendMessageA
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
MessageBoxA
wsprintfA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7abe052f4397d644c2fcf80f1483f9e2

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 148KB - Virtual size: 295KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 148KB - Virtual size: 295KB

.rsrc
Size: 8KB - Virtual size: 4KB