630a7a0ca81af99918fc6d9719c7ed6cfd9a059c6a979e3eb2eea3139c326ca9

General

Target

630a7a0ca81af99918fc6d9719c7ed6cfd9a059c6a979e3eb2eea3139c326ca9
Size

165KB
MD5

7efff8398a8c54106dac725bcfb383df
SHA1

2ffd3b5412a590073f17be4fac0f5e28fbee8bf2
SHA256

630a7a0ca81af99918fc6d9719c7ed6cfd9a059c6a979e3eb2eea3139c326ca9
SHA512

7d3327ae76488c28ea823ae2c57f8146ceec0e4a230af52adf585de79b6b429cf1a8b44f4e068dee04a1d57de1eb3e2a32f1f52ed0a50a9abfdaad6efbc432ae
SSDEEP

3072:xWTBvKWLbGQPrGjAPCum9knrxarRPHwb2Bvt7MRLVSgFVgLuc/1FMgMK6c94B:ezXPyv+rxWXt7MRLgAVgqcgN

Score

N/A

Malware Config

Signatures

Files

630a7a0ca81af99918fc6d9719c7ed6cfd9a059c6a979e3eb2eea3139c326ca9
.exe windows x86

5f6cce62eadeea259fb50d1fbaa7ef67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetVersionExW
GetPrivateProfileSectionW
lstrcmpW
GetLastError
LoadLibraryA
GetCurrentProcess
lstrcmpiW
GetModuleHandleW
FindNextFileW
FindFirstFileW
SetFileAttributesW

user32

GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageW
GetForegroundWindow

gdi32

DeleteObject

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA

gdiplus

GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits

ole32

CoFreeUnusedLibraries
CoDeactivateObject
CoDisconnectObject
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f6cce62eadeea259fb50d1fbaa7ef67

Headers

File Characteristics

Imports

shell32

kernel32

user32

gdi32

advapi32

gdiplus

ole32

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 53KB - Virtual size: 52KB

.reloc Size: 512B - Virtual size: 302B

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 53KB - Virtual size: 52KB

.reloc
Size: 512B - Virtual size: 302B