cd4a1a258231d8d69863fd12bfd1247468ff7846e6938fd8717cce32b06aeb39

General

Target

cd4a1a258231d8d69863fd12bfd1247468ff7846e6938fd8717cce32b06aeb39
Size

54KB
MD5

19c92cf96fe4038150de353029452821
SHA1

110bfef184b62ecf923eb0aa5d4dad5ee370633a
SHA256

cd4a1a258231d8d69863fd12bfd1247468ff7846e6938fd8717cce32b06aeb39
SHA512

db6e866e3112af6008a843ecd863382be117d3353a689cf976e2b7b43cfc12f467af5ea40b493312f74a2b77edad61eed8e84b61e902e173bcff0b7806ea06eb
SSDEEP

768:C5QxcwpxCxg+DBBFUFFsNeFVGPSBqNjt8fIl/Wcp7QsoZGXbv+poG:aQ+NDmlGJP/WcpEsoMbvuoG

Score

N/A

Malware Config

Signatures

Files

cd4a1a258231d8d69863fd12bfd1247468ff7846e6938fd8717cce32b06aeb39
.exe windows x86

ae863fd20b561064cbe55b2597633a8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetPrivateProfileIntA
CloseHandle
SetFilePointer
CreateFileA
FreeLibrary
lstrcpyA
lstrcatA
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
ExitProcess
ReadFile
GetPrivateProfileStringA
lstrcmpiA
lstrlenA
GetTickCount
lstrcmpA

user32

GetWindowTextA
FindWindowA
DispatchMessageA
GetMessageA
MessageBoxA
CreateWindowExA
RegisterClassA
RegisterWindowMessageA
SetForegroundWindow
CharNextA
DestroyMenu
LoadImageA
DestroyIcon
DefWindowProcA
DestroyWindow
PostQuitMessage
SetTimer
SendMessageA
CreatePopupMenu
TrackPopupMenu
InsertMenuItemA
EnableMenuItem
wsprintfA
GetCursorPos

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
Shell_NotifyIconA

nscrt

atoi

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ae863fd20b561064cbe55b2597633a8f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

nscrt

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 12KB

.rsrc Size: 45KB - Virtual size: 45KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 12KB

.rsrc
Size: 45KB - Virtual size: 45KB