e6f337069ef37cb0cdb82e49de24adde216767dae54525b759f9bac034e72248

General

Target

e6f337069ef37cb0cdb82e49de24adde216767dae54525b759f9bac034e72248
Size

47KB
MD5

f9598c6f0dffbfb3d2a76c123fb75575
SHA1

93a1cc3443b3ae01384545583d960cf82021479b
SHA256

e6f337069ef37cb0cdb82e49de24adde216767dae54525b759f9bac034e72248
SHA512

866eb0e3efa1ad03c93741f01e02bc4180373b98015e756ab94a819ae675ac601eebc2c03f574f4ab1f278563cd0fef5f4b6de36982f699fcf1979c847ad2bb7
SSDEEP

768:kMShjWKImJdi8DWW13cpFXl9uASs7p0jKm40R9m+Af:kMSDJw8PMpvcA70emNR9BI

Score

N/A

Malware Config

Signatures

Files

e6f337069ef37cb0cdb82e49de24adde216767dae54525b759f9bac034e72248
.exe windows x86

b5fd50256e5264e8770275b6c0a48cbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetDragImage
ImageList_LoadImage
InitCommonControls
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_GetIcon
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_Read
ImageList_DragShowNolock
ImageList_LoadImageA
ImageList_DrawEx
ImageList_GetImageRect
ImageList_Destroy
ImageList_DragEnter
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_AddMasked
ImageList_GetIconSize

advapi32

RegQueryValueA
RegQueryValueW
RegDeleteKeyW
RegEnumValueA
RegQueryValueExW
RegReplaceKeyA
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyA
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExA
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExW
RegEnumKeyW

user32

GetWindowTextA
DrawTextW
LoadMenuA
CopyImage
GetFocus
LoadCursorA
InsertMenuA
GetDC
AppendMenuA
DrawTextA
IsWindow
AppendMenuW
CloseWindow
GetMenu
CopyIcon
GetWindowTextLengthA
GetDlgItem

kernel32

GetLastError
FreeLibrary
GetLastError
GetStdHandle
GetLastError
GetFileType
GetLastError
lstrcatA
GetLastError
GetLocalTime
GetLastError
ExitProcess
GetLastError
GetCommandLineA
GetLastError
lstrcpyA
GetLastError

Sections

.t72t
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.da0a
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rda8a
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rs9c
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5fd50256e5264e8770275b6c0a48cbb

Headers

File Characteristics

Imports

comctl32

advapi32

user32

kernel32

Sections

.t72t Size: 10KB - Virtual size: 10KB

.da0a Size: 28KB - Virtual size: 28KB

.rda8a Size: 1KB - Virtual size: 27KB

.rs9c Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 4KB

.t72t
Size: 10KB - Virtual size: 10KB

.da0a
Size: 28KB - Virtual size: 28KB

.rda8a
Size: 1KB - Virtual size: 27KB

.rs9c
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 4KB