4d77f4773423320b7356202debb2cfc3a2cadaa0365ee34cf0f4bb7c4bfad0a2

General

Target

4d77f4773423320b7356202debb2cfc3a2cadaa0365ee34cf0f4bb7c4bfad0a2
Size

375KB
MD5

6da2f41120378c3670bc52af076a5e30
SHA1

b8627f883a29a8340cb19448adb897a94d4e7044
SHA256

4d77f4773423320b7356202debb2cfc3a2cadaa0365ee34cf0f4bb7c4bfad0a2
SHA512

35061f9cbebdb9f92520149c23e07b3e8b8189c4a221276ca443847e870fe928f1abe47e60c88912b0f591864bdefc54eae15dd864a8ce72327ffa936fa844c5
SSDEEP

6144:U9Ktb+EUmFywuli0iVuyH6md5nyQ0WYaLJppMyYyLlLIi0dcevOU2f/IFe:JJ4mFj30Ouy77zL72yYAlUpQf/Se

Score

N/A

Malware Config

Signatures

Files

4d77f4773423320b7356202debb2cfc3a2cadaa0365ee34cf0f4bb7c4bfad0a2
.exe windows x86

5fb18382547758084d79ce2ad5e62cf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAlloc

user32

GetSysColor
LoadCursorW

gdi32

GetStockObject
CreateFontIndirectW
DeleteObject
GetDeviceCaps
CreateSolidBrush
GetTextExtentPointW
SetBkColor
ExtTextOutW
CreateCompatibleDC
GetObjectW
BitBlt
SelectObject

msvcrt

__CxxFrameHandler
iswspace
_wcsnicmp
wcslen
memmove
towupper
_c_exit
_XcptFilter
_cexit
exit
_wcmdln
__wgetmainargs
_initterm
wcschr
wcsrchr
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_exit
wcscmp

advapi32

RegOpenKeyExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
FreeSid
GetLengthSid
AddAccessAllowedAce
MakeSelfRelativeSD
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
MapGenericMask
AllocateAndInitializeSid
LookupAccountNameW
GetSecurityDescriptorLength
GetSecurityDescriptorControl

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fb18382547758084d79ce2ad5e62cf2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

advapi32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 290KB - Virtual size: 289KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 290KB - Virtual size: 289KB

.rsrc
Size: 1KB - Virtual size: 1KB