cff40b40ac7c0e713a7bf6a475a6f2a755fbdebabc04b1c530bbe530e845366c

General

Target

cff40b40ac7c0e713a7bf6a475a6f2a755fbdebabc04b1c530bbe530e845366c
Size

108KB
MD5

0eac036881675aa6e7b3634ffacf1a2b
SHA1

194da41bbba97be8a1bf30abaacc45b08dc62920
SHA256

cff40b40ac7c0e713a7bf6a475a6f2a755fbdebabc04b1c530bbe530e845366c
SHA512

b335f4092af50e116ff885e5fa641915e9086e20e2b89311f71334e760775f940b21861f6b31e926329dac45b3b5159066aefd09109c5136ce650919d1cd84fb
SSDEEP

1536:6YLtf3v1CXquWVZiMAcfIfu4YQl4O6oBRIkNoPIJlI0:6u9tCXquW3iYI/r4OHkkNowJlI0

Score

N/A

Malware Config

Signatures

Files

cff40b40ac7c0e713a7bf6a475a6f2a755fbdebabc04b1c530bbe530e845366c
.exe windows x86

a09877c8bfd6d5865b001d9342d4a41d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
WriteFile
ReadFile
GetProcAddress
GetVersion
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
LoadResource
LoadLibraryA
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
TlsAlloc
SetFilePointer
VirtualAlloc
GetTickCount
DeviceIoControl
MultiByteToWideChar
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW

user32

PostQuitMessage
EndPaint
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetSystemMetrics
LoadIconA
RegisterClassExA
EndDialog
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DefWindowProcA
BeginPaint

gdi32

Rectangle
CreateBitmap
GetDeviceCaps

advapi32

RegCloseKey

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

EGM0-S1
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a09877c8bfd6d5865b001d9342d4a41d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 12KB

EGM0-S1 Size: 68KB - Virtual size: 64KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 12KB

EGM0-S1
Size: 68KB - Virtual size: 64KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 12KB - Virtual size: 9KB