55f9af3202a3c5b101549912a36863b40c7b69aa75d09d0f5d50bed63493a2db

Sharing

Copy URL

Twitter E-mail

General

Target

55f9af3202a3c5b101549912a36863b40c7b69aa75d09d0f5d50bed63493a2db
Size

304KB
MD5

834dd6bfc2621c6b9f595c9c0b19aa96
SHA1

0ae6b05da4fc14949200193455002f836fa34a8a
SHA256

55f9af3202a3c5b101549912a36863b40c7b69aa75d09d0f5d50bed63493a2db
SHA512

ea25b83a9675efb76e91621e5a09014dd30994309361d691bcfdfa7aeef3f6186c92d1eab8f0ee5eb8fc30783b33a997feee20ec89d5b58fc6d45915f3d3b918
SSDEEP

6144:icNM1BDtGwp9jscwrtNXZoQSbGqJDIy88YaR5iLFBq5+Z6:iyKjsXtoQSz78/aR5iGW6

Score

N/A

Malware Config

Signatures

Files

55f9af3202a3c5b101549912a36863b40c7b69aa75d09d0f5d50bed63493a2db
.exe windows x86

9249a080e099ac9e0b06b468898d0d86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
DeleteCriticalSection
HeapReAlloc
HeapAlloc
ExitProcess
SetEvent
CreateEventA

user32

LoadCursorW
GetWindowThreadProcessId
SetForegroundWindow
SendMessageTimeoutA
LoadStringA
MessageBoxA

advapi32

RegOpenKeyA

shlwapi

SHGetValueA
StrCmpIW
SHSetValueA
StrStrIA
PathRemoveFileSpecA

Sections

.rdata3
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata2
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text11
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text10
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text9
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9249a080e099ac9e0b06b468898d0d86

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.rdata3 Size: 512B - Virtual size: 200B

.rdata2 Size: 512B - Virtual size: 200B

.rdata Size: 172KB - Virtual size: 172KB

.data Size: 1024B - Virtual size: 1KB

.text Size: 4KB - Virtual size: 4KB

.text11 Size: 512B - Virtual size: 300B

.text10 Size: 512B - Virtual size: 300B

.text9 Size: 512B - Virtual size: 4B

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 512B - Virtual size: 96KB

.rdata3
Size: 512B - Virtual size: 200B

.rdata2
Size: 512B - Virtual size: 200B

.rdata
Size: 172KB - Virtual size: 172KB

.data
Size: 1024B - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.text11
Size: 512B - Virtual size: 300B

.text10
Size: 512B - Virtual size: 300B

.text9
Size: 512B - Virtual size: 4B

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 512B - Virtual size: 96KB