0e4e0d6a802cd2fa878cfaf5abc3381dc4ac41c1b8dc4cd5ecea91168afb6997

General

Target

0e4e0d6a802cd2fa878cfaf5abc3381dc4ac41c1b8dc4cd5ecea91168afb6997
Size

112KB
MD5

645273f0eeddb4f2effd256b18d0c51c
SHA1

879b88c5eea09b1fc5da3ebbf1caddcb7ea22238
SHA256

0e4e0d6a802cd2fa878cfaf5abc3381dc4ac41c1b8dc4cd5ecea91168afb6997
SHA512

01012c07f4cab0f19028d252c2a8db64266329e841259ae2e51bd2b60abd083e5e6ec81c6b1854fe1aecb8653e72f295d2f3b6014829800f85129980f448bdb6
SSDEEP

3072:dWp4emR4cHUmeQtCWT8/xIUU+OG9DPncWn0+wQ7AA/:opKRvptlTQIIO6jnS+t7Z

Score

N/A

Malware Config

Signatures

Files

0e4e0d6a802cd2fa878cfaf5abc3381dc4ac41c1b8dc4cd5ecea91168afb6997
.exe windows x86

d4bf8ae7c2b7421855c954dcd9d26dad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIexp
_CIpow
fclose
floor
pow
strlen
fmod
sin
cos
abs
fabs
ceil
malloc
free

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
HeapAlloc
CloseHandle
DeleteFileA
HeapReAlloc
TlsAlloc
TlsSetValue
GetVersionExA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

CallWindowProcA
DestroyIcon
FillRect
GetIconInfo
DrawIconEx

gdi32

GetObjectType
DeleteObject
GetObjectA
DeleteDC
CreateCompatibleDC
SelectObject
BitBlt
GdiSetBatchLimit
GdiGetBatchLimit
GetStockObject
GetTextExtentPoint32A
CreateDIBSection
SetBkMode
SetTextAlign
SetBkColor
SetTextColor
TextOutA
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetDIBits
GetPixel
CreateFontIndirectA
GetTextMetricsA
CreateCompatibleBitmap
CreateBitmap
SetPixel

shell32

Shell_NotifyIconA

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 345B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4bf8ae7c2b7421855c954dcd9d26dad

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

shell32

Sections

.code Size: 9KB - Virtual size: 8KB

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 512B - Virtual size: 345B

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 924B

.code
Size: 9KB - Virtual size: 8KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 512B - Virtual size: 345B

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 924B