1a574533a8f8fbbe20bbe08c703b88884cc90beb51860070749b469cf0f486f7

General

Target

1a574533a8f8fbbe20bbe08c703b88884cc90beb51860070749b469cf0f486f7
Size

61KB
MD5

90a3c5f644328437f728a6cdb6118f23
SHA1

49008178eafc7e144bcd8280df34ef76566b1627
SHA256

1a574533a8f8fbbe20bbe08c703b88884cc90beb51860070749b469cf0f486f7
SHA512

346441fbd02706129550636ee6439d44fea20e05a99314789616d121a219bc6b2fed48c417d91ccd5b5106b448eb95be0598dc01f2f0a7fd40c74de76b702771
SSDEEP

768:XID2rU4ipEvUxbqFKHtOuIbHErmV6GsCB+GvDcmH53XL6r4cR1TMD4wF53qrT:XCqJ0NO3zCU66+4AmFXL6cY4c

Score

N/A

Malware Config

Signatures

Files

1a574533a8f8fbbe20bbe08c703b88884cc90beb51860070749b469cf0f486f7
.exe windows x86

a58286a30ac83b5663509f852487998c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

MenuHelp
CreateToolbar
DrawInsert
ImageList_Add
ImageList_AddIcon

winmm

PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
sndPlaySoundW
PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundA
PlaySoundW
PlaySoundW
PlaySoundA

kernel32

VirtualAlloc
GetEnvironmentVariableW
WriteFile
ExitThread
_lopen
GetSystemDirectoryA
GetACP
ReadFile
OpenProcess
DuplicateHandle
Beep
CreateThread
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLastError
SetEnvironmentVariableA
ConvertDefaultLocale
GetTempPathW
HeapSize
GetTempPathA
InterlockedExchange
RtlUnwind
SetFilePointer
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
MoveFileA
CreatePipe
GetFileSize
VirtualProtect
LCMapStringW
LCMapStringA

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a58286a30ac83b5663509f852487998c

Headers

File Characteristics

Imports

comctl32

winmm

kernel32

advapi32

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 53KB - Virtual size: 60KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 53KB - Virtual size: 60KB