138e8ef43ff9f482b6edce374b2b0a73b9e2a6644472cc6658e3b1476e28ffa8

General

Target

138e8ef43ff9f482b6edce374b2b0a73b9e2a6644472cc6658e3b1476e28ffa8
Size

534KB
MD5

20751c4fc9720f1ce1cf7f59abaa5e70
SHA1

ea04b6b825631df01855bb405ba5d234c8dad5de
SHA256

138e8ef43ff9f482b6edce374b2b0a73b9e2a6644472cc6658e3b1476e28ffa8
SHA512

06e7c40324c009ef3dc30e9b8e4d9d459a23dc66f599af58a34891fd8ffae8e51eea1a2d167f1506fdf271c67478091b569bdaa4524be5e6244197758515202c
SSDEEP

12288:teKH3ybbf9bYyVfMk3AaHedWyC7w617+V750XL+5Uk+:teKH8a6MkhMW5JYh5Uk+

Score

N/A

Malware Config

Signatures

Files

138e8ef43ff9f482b6edce374b2b0a73b9e2a6644472cc6658e3b1476e28ffa8
.exe windows x86

4ca9a523da2c7fc8687625adf4702a60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

authz

AuthzFreeResourceManager
AuthzAccessCheck
AuthzInitializeContextFromSid
AuthzFreeAuditEvent
AuthzFreeContext

user32

IsWindow
IsZoomed
CharToOemA
GetWindowTextA
GetCaretPos
LoadImageA
GetMessageA
LoadCursorA
PeekMessageA
PostMessageA
GetWindowLongA
DispatchMessageA
IsDialogMessageA

cabinet

FDICopy
FDIIsCabinet
FCICreate
Extract

msimg32

GradientFill
TransparentBlt
AlphaBlend

kernel32

GetProcAddress
GetCurrentDirectoryA
lstrcmpiA
FormatMessageA
GetLocalTime
GetBinaryTypeA
VirtualQuery
GetShortPathNameA
GetVersionExA
HeapValidate
GetLastError
lstrcmpA
lstrcmpiA
GetStdHandle
GetModuleHandleA
GetComputerNameW
FindResourceA
lstrcmpiA
SetFileAttributesA
GetDriveTypeA
GetProcessHeap
GetEnvironmentVariableA
ReplaceFileW
TlsGetValue
SetCurrentDirectoryA
FileTimeToLocalFileTime
CreateNamedPipeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 483KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4ca9a523da2c7fc8687625adf4702a60

Headers

DLL Characteristics

File Characteristics

Imports

authz

user32

cabinet

msimg32

kernel32

Sections

.text Size: 38KB - Virtual size: 38KB

.data Size: 6KB - Virtual size: 16KB

.rsrc Size: 483KB - Virtual size: 560KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 6KB - Virtual size: 16KB

.rsrc
Size: 483KB - Virtual size: 560KB

.reloc
Size: 5KB - Virtual size: 4KB