2290564f05057b7ed9283bdefa188ce6d5e9b7bd05cc7595c46629e5efeea96b

General

Target

2290564f05057b7ed9283bdefa188ce6d5e9b7bd05cc7595c46629e5efeea96b
Size

75KB
MD5

0ca67d78903867ac2db53829a9d5b722
SHA1

6c63e2f0a150fbdc34d4e30242a4289f39217d61
SHA256

2290564f05057b7ed9283bdefa188ce6d5e9b7bd05cc7595c46629e5efeea96b
SHA512

012f3fc86c8a39751042ff2df624ef4789aa820c8d79b2bba9b0091e1c83cdc89bfa9f29eb968aa85810930acb3d29b41110683ff7fe07b19c71c380d91b1fd3
SSDEEP

1536:s7dmsKw93kuRb6x88888888888888888Ys888888888888888888888Y888V4xUJ:sxn39UuBU88888888888888888Ys888J

Score

N/A

Malware Config

Signatures

Files

2290564f05057b7ed9283bdefa188ce6d5e9b7bd05cc7595c46629e5efeea96b
.exe windows x86

9cdbe386da16f8566d446bd144f3375b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapFree
SetHandleCount
SetLastError
TlsAlloc
TlsFree
HeapCreate
TlsSetValue
VirtualFree
WriteFile
VirtualAllocEx
GetWindowsDirectoryW
GetVersionExA
GetProcAddress
GetFileType
GetCurrentThreadId
ExitProcess
TlsGetValue
DeleteCriticalSection

user32

LookupIconIdFromDirectory
MessageBoxW
PeekMessageW
ReleaseDC
SendDlgItemMessageW
SetCursor
SetDlgItemTextW
SetForegroundWindow
SystemParametersInfoW
LoadIconW
LoadStringW
LoadCursorW
GetSystemMetrics
GetSystemMenu
GetDlgItem
GetDC
GetClientRect
EnableMenuItem
DispatchMessageW
DestroyWindow
CreateDialogParamW
CopyRect
CharNextW
GetLastActivePopup

gdi32

GetStockObject
GetTextExtentPointW
GetTextExtentExPointW
GetDeviceCaps

advapi32

RegOpenKeyExA

shell32

SHGetPathFromIDListW
SHChangeNotify
SHAddToRecentDocs
FindExecutableW
SHGetSpecialFolderLocation
ShellExecuteExW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cdbe386da16f8566d446bd144f3375b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

version

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 524B

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 524B