dc8e8684f3ca73c129973eb48725fc0692a7ccc655f750ac5b6e175b2e37b563

General

Target

dc8e8684f3ca73c129973eb48725fc0692a7ccc655f750ac5b6e175b2e37b563
Size

20KB
MD5

800cc968218dc9fb76293e14793d4e90
SHA1

ea7b800fbca6f171781cba4e22a8d2e4d918b4c9
SHA256

dc8e8684f3ca73c129973eb48725fc0692a7ccc655f750ac5b6e175b2e37b563
SHA512

dc4f96da85cb587cf6c98075ef3802b4bb79f2823e56a369f56064955aa377b9ebf1177383425aca015cab50a457cfc37beb4d5ee35410aee2ddf3b58a4e8b99
SSDEEP

384:OIwUOwPTs9clHYCys2sGWBrM41yWdRPDZM39+C:OIwUO+TNlysZGWB5FM3k

Score

N/A

Malware Config

Signatures

Files

dc8e8684f3ca73c129973eb48725fc0692a7ccc655f750ac5b6e175b2e37b563
.exe windows x86

e504a5dcf6b86178795522fd4c8e5f4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
CopyFileW
CloseHandle
GetModuleHandleA
GetStartupInfoA
lstrcpyA
WriteConsoleW
HeapDestroy
HeapCreate
GetCurrentDirectoryA
WriteConsoleW
GetCommandLineA
SetEvent
GetStdHandle
WriteConsoleW
DisconnectNamedPipe
SuspendThread
GetFileAttributesW
lstrlenW
CreatePipe
GetPriorityClass

msftedit

SetCustomTextOutHandlerEx
RichEditWndProc
RichComboBoxWndProc
RichListBoxWndProc

shell32

DragFinish
DragAcceptFiles
SHGetMalloc
SHGetSettings
SHGetDiskFreeSpaceA
ShellMessageBoxA
ExtractIconA
SHFree
DuplicateIcon
ShellAboutA
DragQueryFileA
DllUnregisterServer
StrChrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e504a5dcf6b86178795522fd4c8e5f4a

Headers

File Characteristics

Imports

kernel32

msftedit

shell32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 776B

.rsrc Size: 11KB - Virtual size: 11KB

.rdata Size: 512B - Virtual size: 132B

.impdata Size: 512B - Virtual size: 108B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 776B

.rsrc
Size: 11KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 132B

.impdata
Size: 512B - Virtual size: 108B