5b1d0344266a0f6a8d678d37778c7db57e41c800bee9d5a8245d23bd6a4ec7dc

General

Target

5b1d0344266a0f6a8d678d37778c7db57e41c800bee9d5a8245d23bd6a4ec7dc
Size

26KB
MD5

3b1c4eae0e40fec4fe64f8ad8952a620
SHA1

289c225029ac78510a8f6a51b875aac664415ce3
SHA256

5b1d0344266a0f6a8d678d37778c7db57e41c800bee9d5a8245d23bd6a4ec7dc
SHA512

e57c5f21035e2ef88cb2b73ce7f14892e5e911460695b0226c5d6c3c3f46c9f4795972ca358bff965a70fe2bc86074fef4d568a21f4f7c78ed9840041b750ebc
SSDEEP

384:eMFB8Xg6Dv+aLC+uGWdQWbPbAPAi4JKJGVkVsX7S+:eMFeXv+A9WdQYPMoJhkU

Score

N/A

Malware Config

Signatures

Files

5b1d0344266a0f6a8d678d37778c7db57e41c800bee9d5a8245d23bd6a4ec7dc
.exe windows x86

f3cccf91fbbf671c5bbd732cd3c4377e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
FindClose
WideCharToMultiByte
SetEndOfFile
DeleteFileW
GetACP
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryA
GetProcAddress
VirtualProtect
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
HeapAlloc
SetLastError
VirtualAlloc

user32

GetSystemMetrics
FindWindowW
SetForegroundWindow
SetCursor
SetWindowPos
GetWindowTextW
CreateDialogParamW
DialogBoxParamW
EnableWindow
SendMessageW
CharNextW
CheckMenuItem
CloseClipboard
IsClipboardFormatAvailable
OpenClipboard
GetMenuState
EnableMenuItem
MoveWindow

advapi32

OpenServiceW
QueryServiceConfigW
CloseServiceHandle
IsTextUnicode
RegOpenKeyExW
RegCreateKeyW
RegOpenKeyA
OpenSCManagerW

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS1
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3cccf91fbbf671c5bbd732cd3c4377e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 176B

.BSS Size: 512B - Virtual size: 400B

.BSS1 Size: 512B - Virtual size: 400B

.reloc Size: 1024B - Virtual size: 538B

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 176B

.BSS
Size: 512B - Virtual size: 400B

.BSS1
Size: 512B - Virtual size: 400B

.reloc
Size: 1024B - Virtual size: 538B