f3dea280e2532fe703f90b12ad0865ec6145f9702dd34ace339c45cbf774d2f0

General

Target

f3dea280e2532fe703f90b12ad0865ec6145f9702dd34ace339c45cbf774d2f0
Size

116KB
MD5

1074c00fdc74bb7d460cd743f2cc8a44
SHA1

68e1c7ab241e1ca6e2ca13482ac3f3cc70aa7172
SHA256

f3dea280e2532fe703f90b12ad0865ec6145f9702dd34ace339c45cbf774d2f0
SHA512

94c05608cdfcc2a2811a45e56a9fcaf6b78a0f026ea84da657718a22bc46ff8a85674b027ea0c2af3e1e121196c93196e16e6425e784951313d906de41949e3a
SSDEEP

3072:fqHgsV33xMEMBp7KxjKCvruR7Kr2+n+KAcKAb+l1iju:ugoC3pGvruwrNYN

Score

N/A

Malware Config

Signatures

Files

f3dea280e2532fe703f90b12ad0865ec6145f9702dd34ace339c45cbf774d2f0
.exe windows x86

59c426d28286100f154c5d0354a25788

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecW
PathAddBackslashW
PathFindExtensionW
PathCombineW
PathAppendW

advapi32

RegCloseKey
RegQueryValueExW
RegEnumValueW
RegEnumValueA
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW

user32

PostQuitMessage
SetWindowPos
GetWindowRect
DispatchMessageW
wsprintfW
IsDlgButtonChecked
CreateWindowExW
RegisterClassExW
GetSystemMetrics
EndDialog
DefWindowProcW
TranslateMessage

shell32

ShellExecuteExW

ole32

CoUninitialize
GetRunningObjectTable
CoInitialize
CoCreateInstance
CreateClassMoniker

ddraw

DirectDrawCreate
DirectDrawEnumerateA
DirectDrawCreateEx

kernel32

GetStdHandle
VirtualProtect
SetConsoleMode
GetModuleHandleA
VirtualAlloc
GetStartupInfoA
VirtualQuery
GetProcessVersion
GetVersionExA
SetUnhandledExceptionFilter
GetCommandLineA
ExitProcess
IsBadWritePtr
HeapReAlloc
UnhandledExceptionFilter
HeapFree
HeapDestroy
HeapAlloc
VirtualFree
RtlUnwind
HeapCreate
GetModuleFileNameA
FreeEnvironmentStringsA

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59c426d28286100f154c5d0354a25788

Headers

File Characteristics

Imports

shlwapi

advapi32

user32

shell32

ole32

ddraw

kernel32

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 36KB - Virtual size: 35KB

.rsrc Size: 1024B - Virtual size: 240KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 1024B - Virtual size: 240KB