e5e0fecbf43d125d7027bf405acf2370713cd17420ae6b086461f75befff9e57

General

Target

e5e0fecbf43d125d7027bf405acf2370713cd17420ae6b086461f75befff9e57
Size

125KB
MD5

5dd29ae313d6b8bd5eafd2c25ff35417
SHA1

58499961434947c41055da4738338141889fc557
SHA256

e5e0fecbf43d125d7027bf405acf2370713cd17420ae6b086461f75befff9e57
SHA512

b635e9ddeaf30a6f529a58e7f7f6a789f494a86f7cfd2b67681fadc212704ee0415118186fcbf0aeefc1064cfa386909c6b30b3893afa68bc7bbbb7f60b002f4
SSDEEP

3072:ULYfnKYjueth/6ueKeZCiOUWNyiTi9LJQ:UkfljvhfHXHi

Score

N/A

Malware Config

Signatures

Files

e5e0fecbf43d125d7027bf405acf2370713cd17420ae6b086461f75befff9e57
.exe windows x86

e526fad41d7f5b0f1e64c7f842c53fdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharLowerA
GetWindowDC
DispatchMessageA
GetMenu
LoadCursorA
DispatchMessageW
DestroyMenu
DestroyWindow
GetDesktopWindow

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_Create
ImageList_GetBkColor

kernel32

CreateThread
GlobalAddAtomA
ExitProcess
GetEnvironmentStrings
lstrcmpA
CreateFileA
GetStdHandle
GetCommandLineW
WriteFile
GetStringTypeW
LoadLibraryA
GetLocaleInfoA
MoveFileExA
VirtualAllocEx
GetFileAttributesA
GetVersion
Sleep
CompareStringA
GetModuleHandleA
FreeResource
lstrcpynA
CreateEventA

shlwapi

SHGetValueA
SHEnumValueA

Exports

Exports

xZfNx11cbOmtC

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lkdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e526fad41d7f5b0f1e64c7f842c53fdf

Headers

File Characteristics

Imports

user32

comctl32

kernel32

shlwapi

Exports

Exports

Sections

CODE Size: 15KB - Virtual size: 14KB

DATA Size: 9KB - Virtual size: 104KB

.lkdata Size: 96KB - Virtual size: 96KB

.idata Size: 1KB - Virtual size: 1KB

.jdata Size: 1024B - Virtual size: 944B

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 15KB - Virtual size: 14KB

DATA
Size: 9KB - Virtual size: 104KB

.lkdata
Size: 96KB - Virtual size: 96KB

.idata
Size: 1KB - Virtual size: 1KB

.jdata
Size: 1024B - Virtual size: 944B

.rsrc
Size: 1KB - Virtual size: 1KB