af033320575ff5ce3c17a27054446c967ebab3abd432dcc77b4a43ac51edee5c

General

Target

af033320575ff5ce3c17a27054446c967ebab3abd432dcc77b4a43ac51edee5c
Size

56KB
MD5

fe8694d32729c6245ed6fb59de7c387f
SHA1

50169012c4633780f70e228a782fc07e94e4291a
SHA256

af033320575ff5ce3c17a27054446c967ebab3abd432dcc77b4a43ac51edee5c
SHA512

dfb81f23ad85b850a50f14a18543d1e78445dbe55bd3a2354cab60ba0ee124bc2a182e141fd20a44bf9390e5d9d3c8fd78be0f77544d78e81486264326a71319
SSDEEP

768:TCN+GgZf0nQrzYOAcSLWR7bkzLN0Ps7jFKvvvvWlogagHWXoiVjCzoX7qI5RF7m9:nd8nQr0OhBRszLN5JtWXooIoXug7m0+1

Score

N/A

Malware Config

Signatures

Files

af033320575ff5ce3c17a27054446c967ebab3abd432dcc77b4a43ac51edee5c
.exe windows x86

642615b6cf52b2c163038cba6de98031

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrlenW
SetEnvironmentVariableA
CreateMutexA
HeapCreate
CloseHandle
GetStdHandle
PulseEvent
TerminateThread
LocalFree
Sleep
GlobalUnlock
GetConsoleMode
TlsGetValue
GetModuleHandleA
ReleaseMutex
SetLastError
FindResourceA
LoadLibraryExW
GetCurrentThreadId

user32

FillRect
GetDlgItem
IsWindow
DrawMenuBar
SetFocus
GetIconInfo
CallWindowProcA
GetDC
GetClipCursor
CopyRect
CheckRadioButton
DrawEdge
DispatchMessageA

apphelp

SdbCloseDatabase
SdbFindNextTag
ApphelpCheckIME
SdbFindFirstTag
SdbGetDatabaseID

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oploceu
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tyhxdka
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

642615b6cf52b2c163038cba6de98031

Headers

File Characteristics

Imports

kernel32

user32

apphelp

clbcatq

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 1KB - Virtual size: 28KB

.data Size: 1024B - Virtual size: 522B

.rsrc Size: 47KB - Virtual size: 75KB

oploceu Size: - Virtual size: 4KB

.text Size: - Virtual size: 248KB

tyhxdka Size: - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 1KB - Virtual size: 28KB

.data
Size: 1024B - Virtual size: 522B

.rsrc
Size: 47KB - Virtual size: 75KB

oploceu
Size: - Virtual size: 4KB

.text
Size: - Virtual size: 248KB

tyhxdka
Size: - Virtual size: 4KB