935d818aaf970cc5287673a8ab76b1b49ba70848f25b3f7e72700c50cb9c3050

General

Target

935d818aaf970cc5287673a8ab76b1b49ba70848f25b3f7e72700c50cb9c3050
Size

100KB
MD5

48b8ba849f3aa28c430b9aa36e8f0310
SHA1

4e4ff32f1c96073b0d48c6632f46288df494f6ed
SHA256

935d818aaf970cc5287673a8ab76b1b49ba70848f25b3f7e72700c50cb9c3050
SHA512

01c1dde45d3be5a6267007c063691bf5572308e02989f3596d9d82d13d391c47cb4f2431a4a17ab2097b122e4974b8a118d75b1db847fb24289a36f5db561a60
SSDEEP

1536:cOp/2p7gFXMa9rbUBhA5oYOl+Wfx0N2nmDKOcYJ9+F9o3QfSO+AYoa2:co+JgNrrbUbyWfanc/63oqAYoa2

Score

N/A

Malware Config

Signatures

Files

935d818aaf970cc5287673a8ab76b1b49ba70848f25b3f7e72700c50cb9c3050
.exe windows x86

aa02d54beb5eb07b3fe1311a73a92a11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
WriteFile
ReadFile
GetProcAddress
GetCurrentThreadId
GetVersion
QueryPerformanceCounter
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
LoadResource
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleA
TlsAlloc
DeviceIoControl
SetFilePointer
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetStringTypeW

user32

EndPaint
DrawTextA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetSystemMetrics
LoadIconA
RegisterClassExA
EndDialog
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DialogBoxParamA
DefWindowProcA
FindWindowA
BeginPaint
GetClientRect

gdi32

Rectangle
CreateBitmap

advapi32

RegSetValueExW

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DOCXTYPE
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa02d54beb5eb07b3fe1311a73a92a11

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 12KB

DOCXTYPE Size: 68KB - Virtual size: 64KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 12KB

DOCXTYPE
Size: 68KB - Virtual size: 64KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 2KB