e1e3d434a173290a1b393f7315558b1482d7fc38f97648b6c54fc1e0d23a3c54

General

Target

e1e3d434a173290a1b393f7315558b1482d7fc38f97648b6c54fc1e0d23a3c54
Size

294KB
MD5

8271017fd4c76df6c02eeac4b66d1c13
SHA1

90029df93f6b1570933371f5b6d48a72333e84fc
SHA256

e1e3d434a173290a1b393f7315558b1482d7fc38f97648b6c54fc1e0d23a3c54
SHA512

c95fc01e54d3c3a7c450074247d8b4e28b21f24c4e1ff8cca406e8897c92845eb60a4989df4714711877dd3421fb3f5ef4d84d19d03fe4a207a82fd4aad1f385
SSDEEP

6144:JtHhA3x4o9pOE6AwE76igwEJXtw0aFy3mv8zPPQURDVWTNGi5eEaf:JLCxfOd9EVitwoNrPNVIYC9af

Score

N/A

Malware Config

Signatures

Files

e1e3d434a173290a1b393f7315558b1482d7fc38f97648b6c54fc1e0d23a3c54
.exe windows x86

820ed6b805b34ade6aea50f43a5d70cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentDirectoryA
SuspendThread
GetPriorityClass
ClearCommBreak
lstrlenW
GetStdHandle
IsDebuggerPresent
WriteConsoleW
GetFileAttributesA
CopyFileW
DisconnectNamedPipe
CloseHandle
HeapCreate
SetEvent
GetStartupInfoA
lstrcpyW
WriteConsoleW
WriteConsoleW
GetModuleHandleA
GetLastError
CreatePipe

msftedit

SetCustomTextOutHandlerEx
RichListBoxWndProc
RichEditWndProc
RichComboBoxWndProc

shell32

ShellMessageBoxA
ExtractIconA
DragQueryFileA
DragAcceptFiles
SHGetMalloc
SHGetDiskFreeSpaceA
ShellAboutA
DuplicateIcon
DllUnregisterServer
StrChrA
SHGetSettings
DragFinish
SHFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

820ed6b805b34ade6aea50f43a5d70cd

Headers

File Characteristics

Imports

kernel32

msftedit

shell32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 776B

.rsrc Size: 285KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 132B

.impdata Size: 512B - Virtual size: 108B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 776B

.rsrc
Size: 285KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 132B

.impdata
Size: 512B - Virtual size: 108B