8d5cc137fa9db8f3b42ef2f851571a8b067519a192d2429ed7507d4e74470274

General

Target

8d5cc137fa9db8f3b42ef2f851571a8b067519a192d2429ed7507d4e74470274
Size

112KB
MD5

91284054d40bffcf9cea6e64330c5be1
SHA1

46a10a6aaeda839e0b7f4bba7ae03116123cd9c5
SHA256

8d5cc137fa9db8f3b42ef2f851571a8b067519a192d2429ed7507d4e74470274
SHA512

0447fd4b0ac25f099497d814f60953e19a960ae1bdd399d7193b02c640b0f002e0fd00b7201d0ef02ed3544277d89e77817c80e0dd6aaef9706d771607fe25df
SSDEEP

3072:kZ4cB8H11yt4m4thgxW5Gj5nB2V2TOG1cM:fcc10T4thsW5Gj540TOGGM

Score

N/A

Malware Config

Signatures

Files

8d5cc137fa9db8f3b42ef2f851571a8b067519a192d2429ed7507d4e74470274
.exe windows x86

113192b5ae700d7d41bf7fc28f4069f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
WriteFile
CloseHandle
GetCurrentThread
ExitThread
VirtualAlloc
CreateFileA
GetStdHandle
ResumeThread
GetWindowsDirectoryA
SetFilePointer
OutputDebugStringA
GetCurrentThreadId
SetEvent
ExitProcess
SuspendThread
GetVersionExA
GetFileSize
VirtualFree
LocalAlloc
GetCurrentDirectoryA
GetSystemDirectoryA
CreateThread
GetCurrentProcess
ReleaseMutex
CreateEventA
GetModuleHandleA
VirtualProtect
ReadFile
FatalExit
CreateMutexA
LocalFree
WaitForSingleObject
lstrlenA

advapi32

GetUserNameA

user32

ShowWindow
GetForegroundWindow
GetActiveWindow
GetSystemMetrics
PostMessageA
wsprintfA
RegisterClassA
MessageBoxA
FindWindowA
SendMessageA
CreateDialogParamA

ntdll

tolower

ole32

CoInitialize
CoUninitialize

shlwapi

SHGetValueA

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

113192b5ae700d7d41bf7fc28f4069f8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

ntdll

ole32

shlwapi

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 52KB - Virtual size: 49KB

.data Size: 4KB - Virtual size: 50KB

.rsrc Size: 4KB - Virtual size: 436B

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 52KB - Virtual size: 49KB

.data
Size: 4KB - Virtual size: 50KB

.rsrc
Size: 4KB - Virtual size: 436B