4a0d5052428d6bc4f6a9e66e9101e08fe454b296b03ccfc62d670c1f618daa2a

General

Target

4a0d5052428d6bc4f6a9e66e9101e08fe454b296b03ccfc62d670c1f618daa2a
Size

520KB
MD5

8fb61db16de0b0f5b0d18afb6051f5ba
SHA1

8956471a4080facfddc39646f1b7a11f8d330fab
SHA256

4a0d5052428d6bc4f6a9e66e9101e08fe454b296b03ccfc62d670c1f618daa2a
SHA512

d5eacee55b25a5a7d93878245faa52f9deb214b4ac7cda5dbf89cb3d4cadb251f70c464fb33ab6193b9d42b7b1e6a836873aab05389ce9cf38b5f1a159cdb0a8
SSDEEP

12288:VTjLEg9WJZXKVmQ9sQGwIeQm9iP8jMpsguPuGuH:Vfv9W3XAmQS92iP8jM7

Score

N/A

Malware Config

Signatures

Files

4a0d5052428d6bc4f6a9e66e9101e08fe454b296b03ccfc62d670c1f618daa2a
.exe windows x86

ff31616f77328fab3945ce2c26d70f55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
LoadIconW
LoadCursorW
SendMessageW
LoadStringA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
InvalidateRect
RegisterClassExW
GetKeyboardState
GetPropA
GetScrollPos
FlashWindowEx
GetParent
GetMenuItemID
WindowFromPoint
GetMenu
TranslateAcceleratorA
GetScrollRange
GetScrollInfo
GetWindowLongA

kernel32

CloseHandle
GetCurrentDirectoryW
SleepEx
LoadLibraryW
GetProcessHeap
HeapAlloc
CreateFileA
GetProcAddress
lstrcpyA
CreateFileMappingA
GetFileSize
DeleteFileA
ReadFile
GetStartupInfoA
lstrlenA
GetModuleHandleA

gdi32

DeleteDC
CreateCompatibleDC

comctl32

ord17

shell32

ExtractIconA

crtdll

_global_unwind2
_commode_dll
__GetMainArgs
_initterm
_fmode_dll
_local_unwind2
exit
_XcptFilter
_exit
_acmdln_dll

Sections

.text
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff31616f77328fab3945ce2c26d70f55

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

comctl32

shell32

crtdll

Sections

.text Size: 450KB - Virtual size: 450KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 31KB - Virtual size: 35KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 450KB - Virtual size: 450KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 31KB - Virtual size: 35KB

.rsrc
Size: 1KB - Virtual size: 1KB