ac631bf821d57bdbe2111cb9256900b68e04ccbf5446c53e094b85f85f359599

General

Target

ac631bf821d57bdbe2111cb9256900b68e04ccbf5446c53e094b85f85f359599
Size

168KB
MD5

20f302c60c6cb8ab888b5734fb03a5f6
SHA1

21e584142e91944bd262e8b38da2757379eef103
SHA256

ac631bf821d57bdbe2111cb9256900b68e04ccbf5446c53e094b85f85f359599
SHA512

2031dee64ade355dfe2b9f90adec3d188736ef6505865c2a0b81138dc9beccefcb85a9b605bd07e73a64d5ba8f546c493b9730fac3e5d527145d2bb1e85197a7
SSDEEP

3072:l2JvitbBpds+cv2jujFxvUWhq+Ij9WUibEspo8felK3vaRw+4DSSxVd:l2YH4nvg4hVIj2bFo8CKiF4GSxV

Score

N/A

Malware Config

Signatures

Files

ac631bf821d57bdbe2111cb9256900b68e04ccbf5446c53e094b85f85f359599
.exe windows x86

39de04245eee7a34ee4f5f70fe9b0c37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strlen
strcpy
strncpy
strcat
memcpy
_CIexp
fclose
fabs
ceil
malloc
floor
free

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapFree
HeapAlloc
GetCurrentProcessId
GetCurrentThreadId
FreeLibrary
LoadLibraryA
GetProcAddress
HeapReAlloc
TlsAlloc
GetVersionExA

user32

CallWindowProcA
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetWindowLongA
SetWindowPos
EnableWindow
EnumWindows
DestroyIcon
FillRect

gdi32

GetDeviceCaps
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

comctl32

InitCommonControlsEx

ole32

CoInitialize

winmm

mciSendCommandA

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39de04245eee7a34ee4f5f70fe9b0c37

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

ole32

winmm

Sections

.code Size: 9KB - Virtual size: 8KB

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 512B - Virtual size: 192B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 146KB - Virtual size: 146KB

.code
Size: 9KB - Virtual size: 8KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 512B - Virtual size: 192B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 146KB - Virtual size: 146KB