1bfd0427db67b4d594608786501e6f646c779cea2a6a78cb63e165c01ecbe134

General

Target

1bfd0427db67b4d594608786501e6f646c779cea2a6a78cb63e165c01ecbe134
Size

189KB
MD5

0fb9cd825f317c35d8c4b32d9a2cc5a3
SHA1

d98f9f0da2ffe64343b9b2d60d48a9f7da1d3136
SHA256

1bfd0427db67b4d594608786501e6f646c779cea2a6a78cb63e165c01ecbe134
SHA512

72674aea73e2f494b744111b37095c1e1e849c3c4e6b2d0595007d77616fb32276079e8636505a90d9e57d21c376ecb3d4383946788f5ffbb69311e35f170e2f
SSDEEP

3072:T1lTJTKHvnGuLNn+4EPBr295jjJIb2P5zL1MZjEve7mItFtORUOkZCwrxCNOBPbx:T11JWeQ+zZa5nO2PXcjEv4BtACZCwrUq

Score

N/A

Malware Config

Signatures

Files

1bfd0427db67b4d594608786501e6f646c779cea2a6a78cb63e165c01ecbe134
.exe windows x86

049adfd8f4db2713f0b0f8b93aad2c63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImageWidth
GdipDisposeImage

ole32

CoMarshalHresult
CoInitializeEx
CoCreateInstance
CoInitialize
StringFromCLSID
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CLSIDFromString
CreateItemMoniker
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
CreateStreamOnHGlobal
GetRunningObjectTable
CoTaskMemAlloc

kernel32

FreeLibrary
GetLastError
SetErrorMode
LocalFree
SetPriorityClass
CreateDirectoryA
CloseHandle
ReadFile
GetTempPathA
lstrcmpA
WideCharToMultiByte
WaitForSingleObject
SetCurrentDirectoryW
GetFileSize
DisableThreadLibraryCalls
DeleteFileW
FindFirstFileW
InterlockedDecrement
CreateFileA
GetModuleFileNameW
FindNextFileW
GetCurrentDirectoryW
InterlockedIncrement
EnumResourceTypesW
GetVersionExA
FindClose
GetTempPathW
MultiByteToWideChar
GetTempFileNameW
GetPrivateProfileStringA
GetModuleFileNameA
FindNextFileA
lstrlenA
SetFileAttributesA
DeleteFileA
LocalAlloc
GetFileAttributesA
GetFileAttributesW
SetFileAttributesW
GetExitCodeThread
CopyFileA
GetTempFileNameA

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

049adfd8f4db2713f0b0f8b93aad2c63

Headers

File Characteristics

Imports

gdiplus

ole32

kernel32

Sections

.text Size: 119KB - Virtual size: 119KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 66KB - Virtual size: 65KB

.reloc Size: 1024B - Virtual size: 104KB

.text
Size: 119KB - Virtual size: 119KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 66KB - Virtual size: 65KB

.reloc
Size: 1024B - Virtual size: 104KB