4483cab91c7788b578454d19fb680cc8b24009d1e5dd47138954cc1b655cd133

General

Target

4483cab91c7788b578454d19fb680cc8b24009d1e5dd47138954cc1b655cd133
Size

35KB
MD5

474c0a33c91cd0a199e2a6d86cc28aaf
SHA1

c2552ab3fac0cf8bc6d608458968b8b2917df7e4
SHA256

4483cab91c7788b578454d19fb680cc8b24009d1e5dd47138954cc1b655cd133
SHA512

d4fcc56cfc15a0243f7114b64a92f15288e2d496fa30f413c2c833117510447f6a1da59e46f8796ac40c89e1c12b473e0ad07194708e478d57039fa60cda3ef4
SSDEEP

384:hB+fJEItkVOHwwViSAopxLycEH1it6sCwSA:OWI3QQfScwszCK

Score

N/A

Malware Config

Signatures

Files

4483cab91c7788b578454d19fb680cc8b24009d1e5dd47138954cc1b655cd133
.exe windows x86

6e10955dc6e911423de36e8d2e7c8cbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetDiskFreeSpaceA
GetACP
GetCurrentThread
GetDriveTypeA
GetEnvironmentStringsA
GetPrivateProfileSectionA
IsValidCodePage
GetProcAddress
SearchPathA
CreateFileA
GetDateFormatW
LZClose
ExitThread

shell32

SHGetSpecialFolderPathA

lz32

LZRead
LZInit

esent

JetGetCounter

duser

AddGadgetMessageHandler
AttachWndProcA
AttachWndProcW
AutoTrace
SetGadgetRotation
BuildAnimation
BuildDropTarget
BuildInterpolation
CreateAction
CreateGadget
SetGadgetScale
DUserBuildGadget
DUserCastClass
DUserCastDirect
DUserCastHandle
DUserDeleteGadget
DUserFindClass
DUserGetAlphaPRID
DUserGetGutsData
DUserGetRectPRID
DUserGetRotatePRID
DUserGetScalePRID
DUserInstanceOf
DUserPostEvent
DUserPostMethod
DUserRegisterGuts
DUserRegisterStub
DUserRegisterSuper
DUserSendEvent
DUserSendMethod
DUserStopAnimation

Sections

Size: 2KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

a
Size: 6KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

b
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

d
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e10955dc6e911423de36e8d2e7c8cbf

Headers

File Characteristics

Imports

kernel32

shell32

lz32

esent

duser

Sections

Size: 2KB - Virtual size: 20KB

a Size: 6KB - Virtual size: 82KB

b Size: 21KB - Virtual size: 24KB

.reloc Size: 2KB - Virtual size: 2KB

d Size: 2KB - Virtual size: 2KB

a
Size: 6KB - Virtual size: 82KB

b
Size: 21KB - Virtual size: 24KB

.reloc
Size: 2KB - Virtual size: 2KB

d
Size: 2KB - Virtual size: 2KB