a31697f859601712f76bca1e2968839d3eca779185b0d2868a4529a0eed041e3

General

Target

a31697f859601712f76bca1e2968839d3eca779185b0d2868a4529a0eed041e3
Size

64KB
MD5

baa870c6dfca427e52c2413f0096ac3b
SHA1

df3e3fc2b82717f335350ad11f9d518c9e8ac499
SHA256

a31697f859601712f76bca1e2968839d3eca779185b0d2868a4529a0eed041e3
SHA512

8deb12a5e2b238e4f4896e897b1a67cdb70064a89ad8e478ec232272883c8b9dc8b08fa9f571487165f60a086381b4ec424060a349ba81f32d5eaff31a2b2730
SSDEEP

1536:62foTCwcdzCqHsIgmBm9YpgVDnub+CkOqoGmhE1:62LCqvjM9YORns+CZqoa1

Score

N/A

Malware Config

Signatures

Files

a31697f859601712f76bca1e2968839d3eca779185b0d2868a4529a0eed041e3
.exe windows x86

675e71cbb784d7e60d1ba27383a6df61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
EndDialog

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

kernel32

HeapCreate
RtlUnwind
HeapFree
FindResourceA
LoadLibraryA
FreeLibrary
GetProcAddress
GetSystemDefaultLCID
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
SetStdHandle
VirtualFree
SetEnvironmentVariableA
WriteFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsValidCodePage
Sleep
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
IsValidLocale
CloseHandle
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

675e71cbb784d7e60d1ba27383a6df61

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 3KB