119629576a70e5762e8a6598d98e61d37967b7dbe811aa51c41b93d050041683

General

Target

119629576a70e5762e8a6598d98e61d37967b7dbe811aa51c41b93d050041683
Size

501KB
MD5

96df702b746a073403f2bf1450fb560a
SHA1

20db5c4c57bdb5c7ffea21b36bb6d5a18f68eec3
SHA256

119629576a70e5762e8a6598d98e61d37967b7dbe811aa51c41b93d050041683
SHA512

5a68807bb688797b553d33f67ab579883be0a33def2f37183695bc081fd98b6637c951f3af35f15116fbf8bfc8840d3cf09d99bbd6fdbb244f4a5437dbba2908
SSDEEP

12288:H4MtpJSyiWpQafwh4ZvjV3PhJP4xEqx+Lol4MtpJSyiWpQafwh4ZvjV3PhJP4xE9:HNHpZolNHpZj4m

Score

N/A

Malware Config

Signatures

Files

119629576a70e5762e8a6598d98e61d37967b7dbe811aa51c41b93d050041683
.exe windows x86

87c4a589b687466d1e37226f425760aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FreeResource
GetCommandLineA
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
GetTempPathA
GlobalAlloc
GlobalFree
CreateMutexA
LockResource
RtlMoveMemory
SetFileAttributesA
SizeofResource
Sleep
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
CreateFileA
CopyFileA
LoadResource
CloseHandle

user32

SendMessageA
UpdateWindow
RegisterClassExA
LoadCursorA
ShowWindow
LoadIconA
GetMessageA
TranslateMessage
DefWindowProcA
CreateWindowExA
wsprintfA
DispatchMessageA

shlwapi

PathFindExtensionA
PathFindFileNameA

shell32

ShellExecuteA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 495KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

87c4a589b687466d1e37226f425760aa

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

shell32

advapi32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20KB

.rsrc Size: 495KB - Virtual size: 498KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20KB

.rsrc
Size: 495KB - Virtual size: 498KB