918a8bc0b19c1dd25e62212a96da3424c64260dbe44e317b04724e30e3bcd82f

General

Target

918a8bc0b19c1dd25e62212a96da3424c64260dbe44e317b04724e30e3bcd82f
Size

143KB
MD5

937a045f22268716ddf831261909a0d0
SHA1

ea90fdfeec6d86a30f2a402dd69051ff2d91e321
SHA256

918a8bc0b19c1dd25e62212a96da3424c64260dbe44e317b04724e30e3bcd82f
SHA512

0e69dac5145643a02800c37b7875b7406a9099c95f0da703bbeb69123b6b8b57d2115d46af7529f9c386fa45e3c711f17ded5910774d8c1742054c4a6b90dff5
SSDEEP

3072:uVsUDpx0vbcHYMBsWTD8YasmPLjNHiYwjZrtK64Qdnos:uVsJc+WMYSPLjEdjZJn4Q

Score

N/A

Malware Config

Signatures

Files

918a8bc0b19c1dd25e62212a96da3424c64260dbe44e317b04724e30e3bcd82f
.exe windows x86

7c38b173f60ba7bac8342b61f746505f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessShutdownParameters
IsDebuggerPresent
LocalHandle
EnumResourceTypesA
CreateEventA
GetFileSize
CreateFileMappingA
GetModuleHandleW
ExpandEnvironmentStringsA
GlobalFlags
FindNextVolumeMountPointW
CreateMailslotA
SleepEx
DefineDosDeviceA
lstrlenA
InterlockedExchange
CreateFileMappingW
GetPrivateProfileStringW
OpenWaitableTimerA
EnumCalendarInfoW
GetThreadContext
SwitchToThread
lstrcmpiA
GetStdHandle
MoveFileExA
GetTempFileNameW
GetPrivateProfileStringA
CloseHandle
LocalSize
GetCurrentDirectoryA
LockFileEx
SetThreadExecutionState
CreateWaitableTimerW
GetProcessVersion
SizeofResource

imm32

ImmSetCandidateWindow

user32

MessageBoxIndirectA
GetAsyncKeyState
DdeConnect
DrawTextExA
DdeCreateStringHandleA
RegisterHotKey

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7c38b173f60ba7bac8342b61f746505f

Headers

File Characteristics

Imports

kernel32

imm32

user32

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 292B

.data Size: 48KB - Virtual size: 47KB

.rsrc Size: 1KB - Virtual size: 76KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 292B

.data
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 1KB - Virtual size: 76KB