4c197a526a9115452227a499391e58619c88ee2b55f24577d2aa8c6d897e0edb

General

Target

4c197a526a9115452227a499391e58619c88ee2b55f24577d2aa8c6d897e0edb
Size

294KB
MD5

84e5fa028654dc62fbdf678d2a417e20
SHA1

9ef47cb5bfb7c6f11fde2900bdf1e0a644e3aeb3
SHA256

4c197a526a9115452227a499391e58619c88ee2b55f24577d2aa8c6d897e0edb
SHA512

a6772b5808cddfe8387244fc5222d7f1041cba53cfd240221923ff3426d688bc210dc327f8d267eccd61b6fad6635d079e1d21556c88cc73cac811974ccb864f
SSDEEP

6144:r9A3QYFvyvywU6NLpKG+GsNYuuzjkn/Q8q9RRGiCk5WAI:RCQap69oGzsNYuuzKI8q7Rh8AI

Score

N/A

Malware Config

Signatures

Files

4c197a526a9115452227a499391e58619c88ee2b55f24577d2aa8c6d897e0edb
.exe windows x86

3e41828a7e73c17f99a4c646b39e61fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyA
GetStartupInfoA
SuspendThread
WriteConsoleW
WriteConsoleW
GetModuleHandleA
GetPriorityClass
GetFileAttributesW
GetProcessHeap
SetEvent
CreatePipe
GetCommandLineA
GetStdHandle
lstrlenW
GetCurrentDirectoryA
DisconnectNamedPipe
CloseHandle
HeapCreate
WriteConsoleW
HeapDestroy
CopyFileW

msftedit

RichEditWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc

shell32

DragQueryFileA
ShellMessageBoxA
SHGetMalloc
DllUnregisterServer
SHFree
DuplicateIcon
DragFinish
ShellAboutA
ExtractIconA
SHGetDiskFreeSpaceA
SHGetSettings
DragAcceptFiles
StrChrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e41828a7e73c17f99a4c646b39e61fc

Headers

File Characteristics

Imports

kernel32

msftedit

shell32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 776B

.rsrc Size: 285KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 132B

.impdata Size: 512B - Virtual size: 108B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 776B

.rsrc
Size: 285KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 132B

.impdata
Size: 512B - Virtual size: 108B