77848971f2a3a13a048232c5c4f05e9267bc34b534805e0307a35a14fcc6c2cf

General

Target

77848971f2a3a13a048232c5c4f05e9267bc34b534805e0307a35a14fcc6c2cf
Size

59KB
MD5

a0795d52dfa6b93a77bf1045ca400700
SHA1

545ce29aa50424ed746d456c06f487cd5a418d0e
SHA256

77848971f2a3a13a048232c5c4f05e9267bc34b534805e0307a35a14fcc6c2cf
SHA512

659f18bee10b03c292e36db38b28816a8cae1c764e6f812def0a5503e45f15ebd8178e44dd5fd2847e5ae0cd5d1646d9714f84e0c6cda58872ea89b842271df3
SSDEEP

1536:ru4cJhSOGeF8h4F0JPd0tK+mUwPQa9k3LwizgzygJ2g4B:ruJSOGeyW4q9U9k38iDu2g4B

Score

N/A

Malware Config

Signatures

Files

77848971f2a3a13a048232c5c4f05e9267bc34b534805e0307a35a14fcc6c2cf
.exe windows x86

101db20379549205d9de52b9d92421e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocStringLen
SysReAllocStringLen
SysFreeString
SysFreeString

user32

WindowFromPoint
OpenIcon
ReplyMessage

kernel32

InitializeCriticalSection
GetThreadLocale
DeleteCriticalSection
LeaveCriticalSection
SetCurrentDirectoryA
GetStdHandle
ExitThread
GetModuleFileNameA
lstrlenA
lstrcpynA
VirtualQuery
UnhandledExceptionFilter
GetCurrentDirectoryA
WideCharToMultiByte
SetConsoleCursorMode
GetCurrentProcessId
EnterCriticalSection
WriteFile
FindClose
FreeLibrary
OpenFileMappingW
VirtualFree
GetLocaleInfoA
GetProfileIntA
GetStartupInfoA
FindFirstFileA
FindFirstFileW
FindClose
lstrcmpW
lstrcmpiA
FindNextFileW

gdi32

UnrealizeObject

advapi32

RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 43KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

101db20379549205d9de52b9d92421e9

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

user32

kernel32

gdi32

advapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.debug Size: 43KB - Virtual size: 79KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB

.debug
Size: 43KB - Virtual size: 79KB