9bd7d58559730516249fffc960fa1313967dee1230346318a03d375eca5c8bc6

General

Target

9bd7d58559730516249fffc960fa1313967dee1230346318a03d375eca5c8bc6
Size

190KB
MD5

0d6b4d2ae760dd73aa04bd5a0a2566f9
SHA1

a0720c7232a6db87ba6c7fa3eaf16cb0ffedbfa1
SHA256

9bd7d58559730516249fffc960fa1313967dee1230346318a03d375eca5c8bc6
SHA512

caf3a86afe8b99dc9cf5d6ab48dab693734e1b17e73f4c79e6a825f972cba07147852d3599424dbaaa2ad19a7c3072cb4b6308ea10ff57968d091dbd5cb78d3b
SSDEEP

3072:5HQ3hNzLrPf8YRTnqsF6DGV4jcF12I5enRHZVTAZl4l6CdpOi7qeWC093ivdkF//:5w3hN3Lf8Qnqa6wbF12Ii5VI4l6Jwv0v

Score

N/A

Malware Config

Signatures

Files

9bd7d58559730516249fffc960fa1313967dee1230346318a03d375eca5c8bc6
.exe windows x86

be7e6056406bf65f48e6c34039ebe855

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

comdlg32

GetFileTitleA

kernel32

SetEndOfFile
CreateFiber
GetFileType
FileTimeToSystemTime
GetSystemTime
GetVersionExW
GetProfileStringW
WriteFileGather
VerLanguageNameW
FlushFileBuffers
CompareStringW
FileTimeToLocalFileTime
SearchPathW
EnumResourceNamesW
FlushFileBuffers
FindResourceExA
UnlockFile
LockFile
GetFileAttributesA
LocalAlloc
IsDBCSLeadByte
GetVolumeInformationW
GetFileTime
GetUserDefaultLangID
GetSystemDirectoryW

user32

DefWindowProcW
SetWindowsHookExW
SetScrollRange
MonitorFromWindow
GetSysColorBrush
EmptyClipboard
SetClipboardData
CallNextHookEx
DrawEdge
DestroyCursor
ToAscii
ChildWindowFromPoint
WinHelpW
DestroyIcon
IsClipboardFormatAvailable
ClipCursor
SetWindowPos
RegisterClassW
UnhookWindowsHookEx
GetSysColor

comctl32

ImageList_Add
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy

rpcrt4

RpcStringBindingComposeA
RpcBindingSetAuthInfoA
RpcBindingFromStringBindingA
NdrClientCall
RpcStringFreeA

shlwapi

PathIsRootW
PathIsRelativeW
PathStripToRootW
PathIsURLW
PathCanonicalizeW
PathCombineW

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be7e6056406bf65f48e6c34039ebe855

Headers

File Characteristics

Imports

comdlg32

kernel32

user32

comctl32

rpcrt4

shlwapi

Sections

.text Size: 164KB - Virtual size: 164KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 22KB - Virtual size: 21KB

.lib Size: 512B - Virtual size: 220KB

.text
Size: 164KB - Virtual size: 164KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 22KB - Virtual size: 21KB

.lib
Size: 512B - Virtual size: 220KB