4276fd3db741aeab80566f86c48f29c165822f1042724f405867334459e4692f

Sharing

Copy URL Twitter E-mail

General

Target

4276fd3db741aeab80566f86c48f29c165822f1042724f405867334459e4692f
Size

77KB
MD5

dd295a8e0047dff212e76ee509214985
SHA1

cc031b00596da922f1cad08bb4485ba81ff82ab8
SHA256

4276fd3db741aeab80566f86c48f29c165822f1042724f405867334459e4692f
SHA512

121db22d48560d9dcfc26a9445f1335d425ab51754ea828132092498c093a082d28d4bb720e7f50311a2ce852f13f8edd24ebabb9383ccfcc9b874fde881ef57
SSDEEP

1536:AiQgzHtbdeQi4C9bnWe7z9EQ3G2e7JqSbk4p:lQgzHjCNhWSGXVqz4p

Score

N/A

Malware Config

Signatures

Files

4276fd3db741aeab80566f86c48f29c165822f1042724f405867334459e4692f
.exe windows x86

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCapture
FrameRect
GetActiveWindow
GetClassInfoA
GetMenu

kernel32

lstrcmpA
lstrcatA
GetCurrentThreadId
FormatMessageA
GlobalDeleteAtom
GetCommandLineA
GetThreadLocale
FreeResource
HeapFree
GetCurrentProcessId
SetThreadLocale
HeapDestroy
WriteFile
GetEnvironmentStrings
Sleep
GetSystemDefaultLangID
GlobalAlloc
MoveFileExA
IsBadReadPtr
GetCPInfo
GetStringTypeA
GetFileSize
GetDateFormatA
lstrcpynA
SetFilePointer
GetModuleHandleA
GetACP
HeapAlloc
ExitProcess
LockResource
GetModuleFileNameA
GetFullPathNameA
LocalAlloc
GetStringTypeW
DeleteFileA
SetErrorMode
ExitThread
IsBadHugeReadPtr
WideCharToMultiByte
FindFirstFileA
GetUserDefaultLCID
GetVersionExA
InitializeCriticalSection
FindResourceA
LoadLibraryA
GetCurrentProcess
lstrlenA
DeleteCriticalSection
GetOEMCP
MoveFileA
CreateEventA
GetCommandLineW
VirtualAllocEx
GetLastError
SetHandleCount

comctl32

ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Add

gdi32

SetPixel
CopyEnhMetaFileA
CreateDIBitmap
SetBkColor

Exports

Exports

g0Oaj
_z5GeDLM@20
erEFDy
zwMSPbqRRTUNo
_sjKoqk_5pxln5@4
_ZQadjDUaug
lFe5j8wORwk@4
pmLPa@16
_NL0O_Vv@12
6y5i_Rs@8
_0_Qz4Bnq6pVDni@12
_aLlzzt_B@4
qdrbZ@4
_tlZ61Ed5@20
_2wVLeetDs
_iHoN1
eiQyF@24
vGbDutBN5vA
uDfCr_qKV@8
6DcG_R@4
_uAwjE9H@8
_Ozqlygf@8
_KMJ9w7cu
_c7N327FoK4m@24
QWd5RYQ
_DQ_4JzTNaEp6V
A5KsPNpR6AuR
AYvAre0@20
_HqdPVMFW6jKkk
_Og95dtr1HEi
_VlRBFY9o8HflR6
_WJ6r6PW
_4zwMjl8ZLq5q
_6w3juKVQ
_Kjaxc6w4w@20
_BqREHTkE84ZeN6@24
1wUbW@20
qJF0D6YnV9
_LmYYoc1G
BgBdtud@24
_8MNgEX
P4XjqYj0ZC@16
38_bt
l9xLjnC2qEmMfw
IoIOSx9xHkE5
_Fspaa5aVexX6F@16
PHhtt7OlknkzWK@16
_zOOxKL
HVdV4ineJqC1
tD0Tx3@24
_enGbgZ3VHa@20
f6ob1u7S
tTBZL0HO@24
PpXtVKCqEWywoR
wIc7T3rrfNrmgA
_pr1JXszF3yYNsF
_LMTyAfZR@20
_iFTcsP@16
AhLorke@12
_aUwfJvIuSD@16
0nlUFdTq@24
_JQJ0wiO2TLs_6@20
___JuamE
_75xXuw1xZS@24
9l0KCzaiXd@24
fEx95FDwg89J

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 10KB - Virtual size: 30KB

.kldata Size: 48KB - Virtual size: 47KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 10KB - Virtual size: 30KB

.kldata
Size: 48KB - Virtual size: 47KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB