4bcd6f3480ddfcc9d458e0add9e79fb581ec2403f76a88ed99e9cd6d830512d9

General

Target

4bcd6f3480ddfcc9d458e0add9e79fb581ec2403f76a88ed99e9cd6d830512d9
Size

226KB
MD5

56394e18068a68d68026c78f12e4624f
SHA1

8e8266ad0603cdc62e383e4d90e597e4878b9aec
SHA256

4bcd6f3480ddfcc9d458e0add9e79fb581ec2403f76a88ed99e9cd6d830512d9
SHA512

c3e5f603438ddddacd00e035d097dc8c21101b88032c1cfc9fb47fab5e7e6d784a841d7c78ccb250616601467c522c1c1441aeb3cb4582e817298459f19e64f5
SSDEEP

6144:gV0UcMqGi4xZwJ9FH4gc5TGYs0CSszYys:Q05MLiDDH4NYrSszYys

Score

N/A

Malware Config

Signatures

Files

4bcd6f3480ddfcc9d458e0add9e79fb581ec2403f76a88ed99e9cd6d830512d9
.exe windows x86

0b42efe1a62326ee4ed10119a8b501e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
FindTextA

user32

GetMessagePos
DrawEdge
GetCursorPos
CharToOemA
GetCursor
SetWindowLongA
EnumThreadWindows
GetMenuItemInfoA
CharLowerA
DrawMenuBar
ShowWindow
GetParent
CallNextHookEx
GetSysColor
IsWindowVisible
IsMenu
GetClassInfoA
CreatePopupMenu

kernel32

ExitThread
GetProcessHeap
ReadFile
GetStartupInfoA
GetModuleHandleA
SetErrorMode
GetCPInfo
VirtualAllocEx
GetOEMCP
GetCommandLineA
LockResource
GlobalAlloc
GetACP
LoadLibraryExA
LocalReAlloc
VirtualAlloc
GetTickCount

msvcrt

sprintf
memmove
tolower
mbstowcs
malloc

ole32

OleCreateStaticFromData

version

VerFindFileA
VerInstallFileA
GetFileVersionInfoSizeA

shell32

SHGetFileInfoA
SHFileOperationA
SHGetFolderPathA
SHGetSpecialFolderLocation

Sections

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b42efe1a62326ee4ed10119a8b501e6

Headers

File Characteristics

Imports

comdlg32

user32

kernel32

msvcrt

ole32

version

shell32

Sections

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 193KB - Virtual size: 193KB

INIT Size: 3KB - Virtual size: 2KB

.tls Size: 1KB - Virtual size: 1KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 193KB - Virtual size: 193KB

INIT
Size: 3KB - Virtual size: 2KB

.tls
Size: 1KB - Virtual size: 1KB