b387546acd7b0c8230fb435e83ade460ab1f706c37e97f1ac7aa486db945c3cc

Sharing

Copy URL

Twitter E-mail

General

Target

b387546acd7b0c8230fb435e83ade460ab1f706c37e97f1ac7aa486db945c3cc
Size

159KB
MD5

4d7ce04f5197e01edba1461a3bf4a12a
SHA1

43ad7082b3a81d68a4bd36568308bdf4d9df0ae4
SHA256

b387546acd7b0c8230fb435e83ade460ab1f706c37e97f1ac7aa486db945c3cc
SHA512

0572e92bd0661be5359e5c883128f067a86265a24a67adefc837062fe00295c2dcb6e89c24deff7cd3e0cdbe003785ff2f3124333ee1eb3c285377aa7becc454
SSDEEP

3072:6mfH1vxQrp3ahrAngmUiC3jxsPwaJEI3KrfkcsrHTa47:6DNahAgE2xsPDJEIarTsHm4

Score

N/A

Malware Config

Signatures

Files

b387546acd7b0c8230fb435e83ade460ab1f706c37e97f1ac7aa486db945c3cc
.exe windows x86

a6aaee97c9f8c4c4d8b4c04f7553c263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindowEnabled
GetCapture
BeginPaint
TrackPopupMenu
GetCursorPos
EnumThreadWindows
IsChild
FindWindowA
GetClassInfoA
IsWindowVisible
GetDCEx
GetKeyState
EndDeferWindowPos
GetWindow
DrawFrameControl
RegisterClassA
GetCursor
MessageBoxA
GetFocus
GetMenuItemID
CreatePopupMenu

kernel32

GetOEMCP
DeleteFileA
GetStringTypeA
GetStdHandle
LockResource
lstrcpynA
SetEndOfFile
GetFileAttributesA
HeapDestroy
ReadFile
SetFilePointer
GlobalAlloc
lstrlenA
LoadResource
WaitForSingleObject
EnterCriticalSection
GetCurrentThread
GetUserDefaultLCID
lstrcpyA
SizeofResource
GetProcAddress
GetTickCount
GetModuleFileNameA
WideCharToMultiByte
FormatMessageA
CreateEventA
GetCurrentProcessId
GetLastError
HeapAlloc
EnumCalendarInfoA
lstrcatA
LoadLibraryA
GetCurrentThreadId
GetVersionExA
LocalFree
GetFileSize
VirtualAlloc
HeapFree
DeleteCriticalSection
CloseHandle
MoveFileA
GetSystemDefaultLangID
ExitProcess
GetCurrentProcess
GetStringTypeW
LoadLibraryExA

comdlg32

GetOpenFileNameA
GetFileTitleA
FindTextA
GetSaveFileNameA

msvcrt

srand
tolower
sprintf
rand
exit
__p__commode
_stat
atol
_snprintf
_chsize
wcscspn
wcschr
_unlock

version

GetFileVersionInfoSizeA

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 7KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6aaee97c9f8c4c4d8b4c04f7553c263

Headers

File Characteristics

Imports

user32

kernel32

comdlg32

msvcrt

version

Sections

CODE Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 2KB

.edata Size: 134KB - Virtual size: 133KB

BSS Size: 7KB - Virtual size: 82KB

INIT Size: 2KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 2KB

.edata
Size: 134KB - Virtual size: 133KB

BSS
Size: 7KB - Virtual size: 82KB

INIT
Size: 2KB - Virtual size: 1KB