f355ce5363038d7785d5b88075d3e3a27a44090afbd76784329cce0de8fb684d

General

Target

f355ce5363038d7785d5b88075d3e3a27a44090afbd76784329cce0de8fb684d
Size

112KB
MD5

0f14c7a6565fbd1725c8227044196470
SHA1

d18f4a43f722119f72551295fc06c8a5919c2d65
SHA256

f355ce5363038d7785d5b88075d3e3a27a44090afbd76784329cce0de8fb684d
SHA512

51a49a5a9685e240b7ce69d409f082797af751e8b9363ebb3078d819565a06ed86df457b2174ef5c8332b1a6fd9ce8f0d856d62f7e668d7f96825edb9f130e81
SSDEEP

3072:ETg70uaZ3oU5V0it2rrm2iGQY5vWtiLR3GPBs3UQv:ETg70uaZ3rztIrrVjWXBs3

Score

N/A

Malware Config

Signatures

Files

f355ce5363038d7785d5b88075d3e3a27a44090afbd76784329cce0de8fb684d
.exe windows x86

61f5793cf68a80e378fe74048912eeba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DisconnectNamedPipe
SuspendThread
WriteConsoleW
GetStdHandle
CloseHandle
CopyFileW
GetPriorityClass
GetLastError
lstrcpyW
WriteConsoleW
WriteConsoleW
lstrlenW
GetCurrentDirectoryA
ClearCommBreak
SetEvent
HeapCreate
GetFileAttributesA
CreatePipe
IsDebuggerPresent
GetModuleHandleA
GetStartupInfoA

msftedit

SetCustomTextOutHandlerEx
RichEditWndProc
RichListBoxWndProc
RichComboBoxWndProc

shell32

DragAcceptFiles
StrChrA
SHFree
DllUnregisterServer
ShellAboutA
DragFinish
SHGetMalloc
DragQueryFileA
DuplicateIcon
ExtractIconA
ShellMessageBoxA
SHGetSettings
SHGetDiskFreeSpaceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

61f5793cf68a80e378fe74048912eeba

Headers

File Characteristics

Imports

kernel32

msftedit

shell32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 752B

.rsrc Size: 103KB - Virtual size: 103KB

.rdata Size: 512B - Virtual size: 132B

.impdata Size: 512B - Virtual size: 80B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 752B

.rsrc
Size: 103KB - Virtual size: 103KB

.rdata
Size: 512B - Virtual size: 132B

.impdata
Size: 512B - Virtual size: 80B