dc91ffb4cbaaa2f404eee2f77460db3b7135e10a0379de6a6cc9ca3d6ce37d6a

General

Target

dc91ffb4cbaaa2f404eee2f77460db3b7135e10a0379de6a6cc9ca3d6ce37d6a
Size

116KB
MD5

0c561a7c05447cc6d9d74c9c230bc690
SHA1

cffa8bf2f3819ac1a4b485476c7dd7009f17b9d5
SHA256

dc91ffb4cbaaa2f404eee2f77460db3b7135e10a0379de6a6cc9ca3d6ce37d6a
SHA512

fe8b5b8b70e6ca6a28747973f5a23a474411b7402362099f59dac80ade80c3770f41125e9b21ec76e37eba9c1ae928e9359079332d367eeb1458d50722736801
SSDEEP

3072:SRA7NRcK7lcK01CloAhqS6agU+R9YX7eI:zcscK04OAhqSLgljYX7eI

Score

N/A

Malware Config

Signatures

Files

dc91ffb4cbaaa2f404eee2f77460db3b7135e10a0379de6a6cc9ca3d6ce37d6a
.exe windows x86

192041848ab2af281159a2e38d0b4b38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetFileSize
GetStartupInfoA
IsBadStringPtrA
GetModuleHandleA
FormatMessageA
WriteConsoleW
SetPriorityClass
WriteConsoleW
WriteConsoleW
ReadFile
GetCurrentDirectoryA
IsValidLocale
CloseHandle
GetLastError
ReleaseMutex
FindResourceA
HeapCreate
lstrcpyW
lstrlenW
GetFileTime
GetFileAttributesA

msftedit

RichEditWndProc
RichListBoxWndProc
RichComboBoxWndProc
SetCustomTextOutHandlerEx

clbcatq

SetSetupSave
SetupOpen
ComPlusMigrate
CheckMemoryGates
CheckMemoryGates
ComPlusMigrate
CheckMemoryGates
ComPlusMigrate
SetSetupSave
SetupOpen
SetupOpen
DllGetClassObject
DllGetClassObject

dsprop

CheckADsError

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1024B - Virtual size: 49B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qedit
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

192041848ab2af281159a2e38d0b4b38

Headers

File Characteristics

Imports

kernel32

msftedit

clbcatq

dsprop

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 105KB - Virtual size: 104KB

.adata Size: 1024B - Virtual size: 49B

.qedit Size: 512B - Virtual size: 256B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 105KB - Virtual size: 104KB

.adata
Size: 1024B - Virtual size: 49B

.qedit
Size: 512B - Virtual size: 256B