a7795dca94bd4feb3b169329836cf0a02b1370ebc1a9870e15252e9670445266

General

Target

a7795dca94bd4feb3b169329836cf0a02b1370ebc1a9870e15252e9670445266
Size

511KB
MD5

27357af54e7d75be14a4e38ba4f3fbd0
SHA1

0722e3a0c887828268298f4ca020e610d8f1eb28
SHA256

a7795dca94bd4feb3b169329836cf0a02b1370ebc1a9870e15252e9670445266
SHA512

443d52d0f1b9073f50a421176ee044bbb7d324fe2237a8ced74d9a740d54c34ee6d099d462455f697507805633d4d829bef45b1a00536cd87c991bc3616e9bae
SSDEEP

12288:ZBEvmTCqFe9uIUmsRA/AfK+0iOihXYvS0Tk/uyyVEok:PAiFLIkAIf6iJkS0Tkuyt

Score

N/A

Malware Config

Signatures

Files

a7795dca94bd4feb3b169329836cf0a02b1370ebc1a9870e15252e9670445266
.exe windows x86

762e94516d0a20d28dc28f411cb7e64e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
CreateConsoleScreenBuffer
ExpandEnvironmentStringsA
CloseHandle
WriteFile
CreateFileA
GetDiskFreeSpaceA
SetErrorMode
GetProcAddress
QueryPerformanceFrequency
FreeEnvironmentStringsA
GetModuleHandleA
OpenMutexA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
FindResourceA
GetStringTypeW
GetStringTypeA
LoadResource
lstrlenA
WideCharToMultiByte
ExitProcess
ReadConsoleA
MultiByteToWideChar
SetUnhandledExceptionFilter
GetLastError
GetFullPathNameA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
RaiseException
HeapAlloc
GetCurrentDirectoryA
GetDriveTypeA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringW

user32

MapWindowPoints
LoadCursorFromFileA
SetRect
SetCursor
FindWindowA
GetParent

gdi32

CreateSolidBrush

comdlg32

ChooseColorA

advapi32

RegOpenKeyExA
RegEnumKeyA
RegCloseKey
GetUserNameW

shlwapi

PathCombineA

Sections

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 465KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

762e94516d0a20d28dc28f411cb7e64e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shlwapi

Sections

.data Size: 45KB - Virtual size: 45KB

.rsrc Size: 465KB - Virtual size: 464KB

.data
Size: 45KB - Virtual size: 45KB

.rsrc
Size: 465KB - Virtual size: 464KB