6b50e4e442b2fee997f55971c95d8178534b8f6d2ba56910f4b459c7d8a9667d

General

Target

6b50e4e442b2fee997f55971c95d8178534b8f6d2ba56910f4b459c7d8a9667d
Size

68KB
MD5

1cd385bff3ec7ee3d6ff1bd2ac1bee77
SHA1

961770189574c2c080af4b6ab0f0c042f4e126dd
SHA256

6b50e4e442b2fee997f55971c95d8178534b8f6d2ba56910f4b459c7d8a9667d
SHA512

688329ec05bcbb4e75e24c5065878d0aed88011bccb0d2f460fa86f4c2eff8a023e155b622f676a6f3c62359d9e70fb4ff44997212343ce972990db15cbf10d8
SSDEEP

768:/mSnpVb1qwIgtmDKIqEsPYaSI2FCN706opNVEK6YTDZ5mBR48lNtkbpvaxaB:rpVb1qPlDZsPfS3CLYwY/ZkBi8Gdf

Score

N/A

Malware Config

Signatures

Files

6b50e4e442b2fee997f55971c95d8178534b8f6d2ba56910f4b459c7d8a9667d
.exe windows x86

d3fb06f28d740c32e711931055cf6ddb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
GetFileSize
GetProcessHeap
OpenMutexW
GetLogicalDriveStringsA
OpenMutexW
lstrcpynW
GetDateFormatA
HeapAlloc
GetLocaleInfoW
GetStartupInfoA
CreateEventA
ReadFile
DeleteFileA
TlsGetValue
GetProcAddress
GetModuleHandleA
GetDriveTypeW
GetCurrentDirectoryW
WaitForSingleObjectEx

crypt32

CertSaveStore
CertNameToStrA
CertDuplicateStore
CertDuplicateCRLContext
CertCloseStore
CertCreateContext
CertFindChainInStore
CertGetNameStringA
CertAddStoreToCollection
CertFindCRLInStore
CertFindExtension
CertFreeCRLContext
CertAlgIdToOID
CertCreateCRLContext
CertCompareCertificate
CryptEnumOIDInfo

dsprop

ErrMsgParam
FindSheet
ErrMsg
CheckADsError

uxtheme

GetThemeRect
IsThemeActive
GetThemeColor
GetThemeTextMetrics
DrawThemeEdge
SetWindowTheme
GetWindowTheme
CloseThemeData
GetThemeSysSize
GetThemeFont
OpenThemeData
GetThemeBool
GetThemeInt
DrawThemeBackground

user32

DialogBoxParamW
GetKeyNameTextA
FindWindowA
LoadImageA
FindWindowA
LoadCursorW
CharToOemA
DispatchMessageW
DefDlgProcA
LoadStringA
MessageBoxW
GetMessageA
FindWindowA
GetClassInfoA
DrawTextA

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3fb06f28d740c32e711931055cf6ddb

Headers

File Characteristics

Imports

kernel32

crypt32

dsprop

uxtheme

user32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 24KB - Virtual size: 20KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 24KB - Virtual size: 20KB