c7f63cfde7f4ab54c8057ab0674c5e039869b07a33191bd4edad43e5476a8598

Sharing

Copy URL

Twitter E-mail

General

Target

c7f63cfde7f4ab54c8057ab0674c5e039869b07a33191bd4edad43e5476a8598
Size

1.4MB
MD5

bcd3feac8bf61e44217b1a3d34375100
SHA1

f9f53b2d1a17cb064c976fd66eec8937b2f88dec
SHA256

c7f63cfde7f4ab54c8057ab0674c5e039869b07a33191bd4edad43e5476a8598
SHA512

ea07b8a23b96e534c2c634d415251d2829bdcf6420835e0f8d311c14a77853370121a1c201a00e06ce2db3d838d97830f04292c59dc5ceb0d38c2d50e0222f6b
SSDEEP

24576:TrYqrk6ddiMV5vw9Yxy4b0+bDWtWd5H8cQcS7hKvhAAbpQh04+bnWc:Trhk6XB5w9Z4b0WDW8Bxm7h0AAbLWc

Score

N/A

Malware Config

Signatures

Files

c7f63cfde7f4ab54c8057ab0674c5e039869b07a33191bd4edad43e5476a8598
.exe windows x86

d68ea31c5a1c2a808e4f7e5b30286cc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersion
GetVersionExA
GetVersion
SetHandleCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

CreatePopupMenu

advapi32

RegQueryValueExA

oleaut32

SysAllocStringLen

version

VerQueryValueA

gdi32

CreatePenIndirect

ole32

CoCreateInstance

comctl32

ImageList_DragEnter

shell32

ShellExecuteExA

Sections

CODE
Size: - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d68ea31c5a1c2a808e4f7e5b30286cc4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

shell32

Sections

CODE Size: - Virtual size: 369KB

DATA Size: - Virtual size: 6KB

BSS Size: - Virtual size: 3KB

.idata Size: - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 1.1MB

.vmp1 Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 512B - Virtual size: 276B

.rsrc Size: 43KB - Virtual size: 42KB

CODE
Size: - Virtual size: 369KB

DATA
Size: - Virtual size: 6KB

BSS
Size: - Virtual size: 3KB

.idata
Size: - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 1.1MB

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 512B - Virtual size: 276B

.rsrc
Size: 43KB - Virtual size: 42KB