cf781086eecef0c28b49ba6bc613281ca3d0d3038c4131b75bed4d0c450191bc

Sharing

Copy URL Twitter E-mail

General

Target

cf781086eecef0c28b49ba6bc613281ca3d0d3038c4131b75bed4d0c450191bc
Size

1.0MB
MD5

ed7a5b5a390458b4e6f9573de706e955
SHA1

8aeeb9345c6367b7bee3766dea45f74078d138a1
SHA256

cf781086eecef0c28b49ba6bc613281ca3d0d3038c4131b75bed4d0c450191bc
SHA512

5a3095b8a32d9bab3edba8c1ff5ac48d09231802a28146b6b140779407d677b7d80e947a384d51ae03abc7cbb38effcc609224cc93d12c6500a32fa534b7cd7e
SSDEEP

24576:tQnwfBzgicMQeufVV9XNw4xqquXFM9LInvv60a0ZWCP:tcwfl7grVEquXFw06T0

Score

N/A

Malware Config

Signatures

Files

cf781086eecef0c28b49ba6bc613281ca3d0d3038c4131b75bed4d0c450191bc
.exe windows x86

d5badc6ec960228d53decc044130a47b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString

advapi32

RegOpenKeyExA

user32

ClientToScreen

kernel32

GetVersion
GetVersionExA
VirtualAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

CreateBitmap

version

VerQueryValueA

comctl32

ImageList_EndDrag

Sections

.text
Size: - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 845KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5badc6ec960228d53decc044130a47b

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

comctl32

Sections

.text Size: - Virtual size: 331KB

.itext Size: - Virtual size: 1KB

.data Size: - Virtual size: 6KB

.bss Size: - Virtual size: 19KB

.idata Size: - Virtual size: 9KB

.tls Size: - Virtual size: 52B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 845KB

.vmp1 Size: 1.0MB - Virtual size: 1.0MB

.reloc Size: 512B - Virtual size: 260B

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: - Virtual size: 331KB

.itext
Size: - Virtual size: 1KB

.data
Size: - Virtual size: 6KB

.bss
Size: - Virtual size: 19KB

.idata
Size: - Virtual size: 9KB

.tls
Size: - Virtual size: 52B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 845KB

.vmp1
Size: 1.0MB - Virtual size: 1.0MB

.reloc
Size: 512B - Virtual size: 260B

.rsrc
Size: 5KB - Virtual size: 5KB