1b65b967e70c6b695e5e87a208d93eed1dbc5bf4be43f9368b69dc391689c7fc

General

Target

1b65b967e70c6b695e5e87a208d93eed1dbc5bf4be43f9368b69dc391689c7fc
Size

78KB
MD5

41c734d6825dfd0584f4cac65156c2ce
SHA1

d58a42c7117955215d232e11a855e5b71e458e54
SHA256

1b65b967e70c6b695e5e87a208d93eed1dbc5bf4be43f9368b69dc391689c7fc
SHA512

b204962abf05e6d547f663e58e04e52d36c2bf398816a8b00f8189ec2fc890f519e74f8ca0e776f6a45cbcc9b55aca5f222db98096d0f0d7461539b37987fb7f
SSDEEP

1536:4UGYJByMVq2Y5eUOQOC9B3j1h30qD2zOztlKspbaDYwLkRC:4leBHVq2HQjnxh30qDVztfmzIC

Score

N/A

Malware Config

Signatures

Files

1b65b967e70c6b695e5e87a208d93eed1dbc5bf4be43f9368b69dc391689c7fc
.exe windows x86

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetTopWindow
IsWindowEnabled
GetMenu
TranslateMDISysAccel
SystemParametersInfoA
GetCursor
KillTimer
TrackPopupMenu
TranslateMessage

version

VerInstallFileA
GetFileVersionInfoSizeA

kernel32

GetDateFormatA
VirtualAlloc
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetDiskFreeSpaceA
GetCurrentProcessId
LoadLibraryA

comctl32

ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_Read
ImageList_Write
ImageList_GetBkColor
ImageList_DrawEx

Exports

Exports

h21pHC472@24
tcP_VaTaB0_T@12
kP7em
mMDeqUmeCWyuc2
JctS8uR
zUlUg6Etf
K3agxx__Y2zlIj@16
FCb4XB@20
_ivhEnv487u6tOF
_WLmN40Sjz8wLB@12
CTR_d_Vb9
_XFD3tDOAL@20
MQVDe@12
F2TuclnQ0@8
_a_wI8T55_U88@24
_3R2ng
_jk3QVQ
_KGeGuiNeC@12
_xiJ4XA_lK
8t96thmJ6epi
XG51uu0oSW7Mn
_QZutguymil1@8
ox2wq0Ck4Jsu9
_rZL7B
Vo_6Zm4LY7qY@20

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

Imports

user32

version

kernel32

comctl32

Exports

Exports

Sections

CODE Size: 14KB - Virtual size: 13KB

.data Size: 10KB - Virtual size: 9KB

.ihdata Size: 49KB - Virtual size: 49KB

.idata Size: 1024B - Virtual size: 882B

.thdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 14KB - Virtual size: 13KB

.data
Size: 10KB - Virtual size: 9KB

.ihdata
Size: 49KB - Virtual size: 49KB

.idata
Size: 1024B - Virtual size: 882B

.thdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB