78a2a763aa3b0c0d533856cdeaacd49ff01cb09e2b99814ef1b46a37d54e2305

General

Target

78a2a763aa3b0c0d533856cdeaacd49ff01cb09e2b99814ef1b46a37d54e2305
Size

184KB
MD5

90718aefd91e2f3c8cb0dacc7e2840f2
SHA1

0c4a121a60b3efbd4306c58cbb5a144de702171c
SHA256

78a2a763aa3b0c0d533856cdeaacd49ff01cb09e2b99814ef1b46a37d54e2305
SHA512

07414aee452473d0eeac55bcab8a9d0a5f5083ecc83fb80d59694f19a828c7a1f07449d0a7c4f40f869a0d5dbc88871801282eb7afdd71fd5d94327a7d758d90
SSDEEP

3072:/1hsBYbuNfKsuwoIPBHjUI8qkAtY+vVTjV1jQdfsbp3Ja7J2dVE6LXj5BgE:/zsBmwvoSxyYTjV1ia9JzL/T5O

Score

N/A

Malware Config

Signatures

Files

78a2a763aa3b0c0d533856cdeaacd49ff01cb09e2b99814ef1b46a37d54e2305
.exe windows x86

40aab5cc26560fc6c1a9f635c9fa7cee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

gdi32

SelectObject
GetTextMetricsA
GetTextExtentPointA
GetDeviceCaps
DeleteObject
CreateFontIndirectA

ole32

CoGetMalloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc

kernel32

GetACP
InitializeCriticalSection
lstrlenW
GetLastError
DeleteCriticalSection
GetCPInfoExW
InterlockedIncrement
GetStartupInfoA
LeaveCriticalSection
GetFileType
HeapSize
GetOEMCP
MultiByteToWideChar
GetStdHandle
EnumResourceTypesA
GetEnvironmentStrings
QueryPerformanceCounter
EnterCriticalSection
GetThreadLocale
InterlockedExchange
GetCPInfo
TlsGetValue
SetHandleCount
FreeEnvironmentStringsA
GetLogicalDriveStringsA
WideCharToMultiByte
GetLocaleInfoA
FreeEnvironmentStringsW
TlsSetValue
WriteFile
GetTickCount
GetVersionExA
UnhandledExceptionFilter
RaiseException
GetEnvironmentStringsW
GetCurrentProcessId

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40aab5cc26560fc6c1a9f635c9fa7cee

Headers

File Characteristics

Imports

msimg32

newdev

shell32

gdi32

ole32

kernel32

Sections

.text Size: 104KB - Virtual size: 104KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 75KB - Virtual size: 75KB

.reloc Size: 1024B - Virtual size: 124KB

.text
Size: 104KB - Virtual size: 104KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 75KB - Virtual size: 75KB

.reloc
Size: 1024B - Virtual size: 124KB