da90aebcc0d981ed6c0f5a0c031751b0858f7b4accd571ac2acdfc7b496d9740

Sharing

Copy URL

Twitter E-mail

General

Target

da90aebcc0d981ed6c0f5a0c031751b0858f7b4accd571ac2acdfc7b496d9740
Size

4.8MB
MD5

52892e52a02453b4b4c19243aa2d6ac7
SHA1

d1ad866e6ca77d3fbe7252db58528240f7c444db
SHA256

da90aebcc0d981ed6c0f5a0c031751b0858f7b4accd571ac2acdfc7b496d9740
SHA512

16c15f63c585a459b3e83482e4171fe5b86a8bd6e142636618b7f2240d47fd59813abb44f2bec59735f7711b8b8cc02e14a9eca7d0a4a2f339f158244b24716b
SSDEEP

98304:Pcj2HBOSbXcjxJyKFnbU2rsygBuyz0ANbXBdijekvX4jtfKillblA7CjmiU/F7KY:kaEaXWYUnA2rsNLWPX4Bv0CmiU92w

Score

N/A

Malware Config

Signatures

Files

da90aebcc0d981ed6c0f5a0c031751b0858f7b4accd571ac2acdfc7b496d9740
.exe windows x86

41d525c63e74584006ee9c05eb64cdda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersion
GetVersionExA
GetVersion
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

CreateMenu

advapi32

RegOpenKeyExA

oleaut32

SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

SetWindowOrgEx

comctl32

ImageList_ReplaceIcon

opengl32

glIsList

shell32

ShellExecuteA

Exports

Exports

DeleteTempFiles
GetEnvironmentVariables
GetModuleNameByProcessID
IsOnWow64
IsWrongOS
KernelCount
LastPos
RegDelValue
SetTheReg

Sections

CODE
Size: - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41d525c63e74584006ee9c05eb64cdda

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

comctl32

opengl32

shell32

Exports

Exports

Sections

CODE Size: - Virtual size: 345KB

DATA Size: - Virtual size: 3.2MB

BSS Size: - Virtual size: 3KB

.idata Size: - Virtual size: 8KB

.edata Size: - Virtual size: 270B

.tls Size: - Virtual size: 16B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 2.3MB

.vmp1 Size: 4.8MB - Virtual size: 4.8MB

.reloc Size: 512B - Virtual size: 328B

CODE
Size: - Virtual size: 345KB

DATA
Size: - Virtual size: 3.2MB

BSS
Size: - Virtual size: 3KB

.idata
Size: - Virtual size: 8KB

.edata
Size: - Virtual size: 270B

.tls
Size: - Virtual size: 16B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 2.3MB

.vmp1
Size: 4.8MB - Virtual size: 4.8MB

.reloc
Size: 512B - Virtual size: 328B