fa45499200dca972131142f574760dab18135fe0d5574b492437bd3045205d67

General

Target

fa45499200dca972131142f574760dab18135fe0d5574b492437bd3045205d67
Size

35KB
MD5

26a41fb4efbbd5128ccff0f4e4241900
SHA1

e5625133f89fd5641ccaacf462f608cb54c8ac17
SHA256

fa45499200dca972131142f574760dab18135fe0d5574b492437bd3045205d67
SHA512

22d5ce208303ea27e87efaeea0e57bae048b68fe42fa878af9ccbbb0b7e2dbd01c6638991c3068fe3943a0e9d3d163b50990265ac47a0b954f4c8a94d70d0827
SSDEEP

768:W+E23zNdoTA2B7Cx9IGV3GaOVwkX2tylo8FS8STWv2bmFjk:R3z/V2uxUa41X2tx8FJSCv26Fjk

Score

N/A

Malware Config

Signatures

Files

fa45499200dca972131142f574760dab18135fe0d5574b492437bd3045205d67
.exe windows x86

83ac3435ce75a7addd17a1fe2144a37d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
GetActiveWindow
MessageBoxA
LoadCursorA
RegisterClassA
GetDC
ReleaseDC
RegisterWindowMessageA
IsRectEmpty
GetSystemMetrics
CreateWindowExA
SetCursor
PostQuitMessage
GetCursorPos
PostMessageA
DefWindowProcA

gdi32

GetClipBox
GetStockObject

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_cexit
_XcptFilter
_exit
_c_exit
strchr
atoi
__initenv

kernel32

OpenFile
GetVersionExA
GetModuleHandleA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
LoadLibraryA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetCurrentThreadId
FreeLibrary

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ysykcam
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

83ac3435ce75a7addd17a1fe2144a37d

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

msvcrt

kernel32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 692B

.rsrc Size: 29KB - Virtual size: 30KB

ysykcam Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 692B

.rsrc
Size: 29KB - Virtual size: 30KB

ysykcam
Size: - Virtual size: 4KB