970f7746b2cf100811be57372bc57d6d70e79cee6a38ba251189195dd744c15b

General

Target

970f7746b2cf100811be57372bc57d6d70e79cee6a38ba251189195dd744c15b
Size

55KB
MD5

54616f5c38987901da2d65c47eb9e6ae
SHA1

9316689466ed08761858c7fd06290f17cfe3914d
SHA256

970f7746b2cf100811be57372bc57d6d70e79cee6a38ba251189195dd744c15b
SHA512

f8682532e181f2af327597386e15bf5e06681f3250c5d97325d994a4545455e5dc59b37538e02610ccab76c9e13ba98b23aba796590d324291ff49fd9bf24a06
SSDEEP

768:/WhYddfSWJZLnUT2wnqP3vjeBc4EiB9hmEinyL8y1+oJ/ICqaJFYk4KUkrFodlb:/WhYHfSiZA2eBU9yQoJ/Mawk4KUo8b

Score

N/A

Malware Config

Signatures

Files

970f7746b2cf100811be57372bc57d6d70e79cee6a38ba251189195dd744c15b
.exe windows x86

67a698a9e9267a4db527acfcc4c2cc2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
IsBadReadPtr
GetNumberFormatA
GlobalAlloc
DeleteFileA
GetBinaryTypeA
GetCommandLineA
GetProcAddress
LoadLibraryA
GetComputerNameA
LocalFree
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
lstrcatA
CloseHandle
GetUserDefaultLangID
GetCurrentDirectoryA
HeapReAlloc
VirtualAlloc
WriteFile
LCMapStringW
FormatMessageW
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
RaiseException

user32

SetFocus
IsClipboardFormatAvailable
MessageBoxA
IsDlgButtonChecked
SetCursorPos
GetCursorPos
ClientToScreen
EmptyClipboard

gdi32

GetObjectType
DeleteDC
CreatePen

shell32

ShellExecuteA
FindExecutableA

imagehlp

MapFileAndCheckSumA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67a698a9e9267a4db527acfcc4c2cc2b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

imagehlp

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 75KB - Virtual size: 74KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 75KB - Virtual size: 74KB