df1bbadd4d77fc8862b937797694f421cf64b8b5db55b86e293fb0cde64267ad

General

Target

df1bbadd4d77fc8862b937797694f421cf64b8b5db55b86e293fb0cde64267ad
Size

16KB
MD5

0e3221b4815cb2f5e3826ed829608428
SHA1

d8135ac1a43a6bc6e189bba36740bcd8dec71e62
SHA256

df1bbadd4d77fc8862b937797694f421cf64b8b5db55b86e293fb0cde64267ad
SHA512

194f98b7bdd70100325ca05ce8e37352cc18b99d7a3396eb2a68b78d2f884206b225bd4c6757d6284f066570bbacb6cfc494d478bfd6564754481993679f7c78
SSDEEP

384:rZPmr1lvrDyu1iyCjpEwJmYWEgW8oobpSQzURK:KLfyu+Nv0OJdQ

Score

N/A

Malware Config

Signatures

Files

df1bbadd4d77fc8862b937797694f421cf64b8b5db55b86e293fb0cde64267ad
.exe windows x86

081aad1f1cdc17bccd2f8287346a25d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA

kernel32

FreeLibrary
CreateProcessA
LoadLibraryA
GetSystemInfo
ExitProcess
GetCommandLineA
GetStartupInfoA
CloseHandle
lstrcmpiA
GetWindowsDirectoryA
CreateEventA
LocalFree
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
lstrcatA
lstrlenA
GetACP
GetVersionExA
ResetEvent

user32

EnumWindows
GetClassNameA
FindWindowA
PostMessageA
SetTimer
KillTimer
TranslateMessage
DispatchMessageA
PeekMessageA
GetMessageA
SetWindowPos
GetSystemMetrics
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
MsgWaitForMultipleObjects

msctf

TF_InvalidAssemblyListCache
TF_InvalidAssemblyListCacheIfExist
TF_UninitSystem
TF_InitSystem
TF_CreateCicLoadMutex
TF_PostAllThreadMsg

msutb

GetPopupTipbar
ClosePopupTipbar

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

081aad1f1cdc17bccd2f8287346a25d7

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msctf

msutb

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 464B

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 464B

.rsrc
Size: 6KB - Virtual size: 5KB