851d6caca31b8922dc7761f9e6ee1dfda6768340366064db25d1e1d0cfa30aa5

General

Target

851d6caca31b8922dc7761f9e6ee1dfda6768340366064db25d1e1d0cfa30aa5
Size

528KB
MD5

9259037b6b99782356edeffe70451ee6
SHA1

aa722f73f9a3af0b0e4e998d7960b0fc63f26a1f
SHA256

851d6caca31b8922dc7761f9e6ee1dfda6768340366064db25d1e1d0cfa30aa5
SHA512

e4d2d99da88c86fc41cd5b5ecd18c194260679be6698a75070a921347f16f4c2ff3ba612f081edfff338f83caa5d09095520fb8627b6cb7b4302a380821b8cb8
SSDEEP

6144:DCqo3ypZ+Hh4Oevu6VXGi8SsnO5OoYRX3Lz7povap1XHbt4kkQ19OJdUAuBgmjOs:YoZG3cuuWiJs1ouX3O0HDp+JCLe3

Score

N/A

Malware Config

Signatures

Files

851d6caca31b8922dc7761f9e6ee1dfda6768340366064db25d1e1d0cfa30aa5
.exe windows x86

37a5eee9d07e97050dd0eec6be50ca17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

user32

GetKeyboardState
GetPropA
GetScrollPos
GetParent
InvalidateRect
GetMenu
TranslateAcceleratorA
GetScrollRange
GetScrollInfo
TranslateMessage
DispatchMessageW
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringA
RegisterClassExW
LoadCursorW
SendMessageW
SendMessageA
DestroyWindow
PostQuitMessage
DialogBoxParamW
DefWindowProcW
CreateWindowExW
GetMenuItemID
LoadIconW
GetWindowLongA

kernel32

DeleteFileA
GetCurrentDirectoryW
LoadLibraryW
SleepEx
GetProcessHeap
HeapAlloc
CreateFileA
GetProcAddress
lstrcpyA
CreateFileMappingA
GetFileSize
GetModuleHandleA
CloseHandle
lstrlenA
GetStartupInfoA
ReadFile

comctl32

InitCommonControlsEx

shell32

ExtractIconA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37a5eee9d07e97050dd0eec6be50ca17

Headers

File Characteristics

Imports

user32

kernel32

comctl32

shell32

msvcrt

Sections

.text Size: 400KB - Virtual size: 399KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 36KB - Virtual size: 35KB

.rsrc Size: 44KB - Virtual size: 41KB

.text
Size: 400KB - Virtual size: 399KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 44KB - Virtual size: 41KB