5d5d0ba786cbfbd264f077f74872fba9495ce75ce17e324adeebbf70fb40b1ac

General

Target

5d5d0ba786cbfbd264f077f74872fba9495ce75ce17e324adeebbf70fb40b1ac
Size

88KB
MD5

3ff5089824c12bfb4eb2e38343fb3960
SHA1

4ee29ce73642e5bde232992c392dafcc1d616c65
SHA256

5d5d0ba786cbfbd264f077f74872fba9495ce75ce17e324adeebbf70fb40b1ac
SHA512

0513aedbe3fe49cfff68ab5aa3cd42ea154320f872f4c18118bf02a553ee43bc3fba9f9f30384e4016b044fac4c0cd2251fb224edde9366ce769ac3ce21479de
SSDEEP

1536:ysdN/W9BeJm3PkVK1eEpIIeh+o8C8aex7KaHbrl903uvy8uiAdA:yj3PPU+Xea7p903uvyPdA

Score

N/A

Malware Config

Signatures

Files

5d5d0ba786cbfbd264f077f74872fba9495ce75ce17e324adeebbf70fb40b1ac
.exe windows x86

80419bf3448fe7b59998256d38d48b43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDiskFreeSpaceA
SHFileOperationA
SHGetFileInfoA

msvcrt

_acmdln
malloc
sprintf
memcpy
mbstowcs
memmove
rand
clock
tolower

comdlg32

ChooseColorA
FindTextA

advapi32

RegEnumValueA
RegLoadKeyA

kernel32

LoadLibraryExA
Sleep
GetOEMCP
GetLastError
GetStdHandle
GetACP
CreateFileA
CreateEventA
GetFileType
VirtualAllocEx
LocalAlloc
GetCommandLineA
GetSystemDefaultLangID
GetDateFormatA
ExitProcess
SetEvent

shlwapi

PathIsDirectoryA
SHQueryValueExA
PathGetCharTypeA
PathIsContentTypeA
SHEnumValueA
SHQueryInfoKeyA
SHStrDupA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA

Sections

BSS
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80419bf3448fe7b59998256d38d48b43

Headers

File Characteristics

Imports

shell32

msvcrt

comdlg32

advapi32

kernel32

shlwapi

Sections

BSS Size: 13KB - Virtual size: 12KB

.rdata Size: 64KB - Virtual size: 64KB

.edata Size: 5KB - Virtual size: 5KB

DATA Size: 1KB - Virtual size: 13KB

.init Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 571B

BSS
Size: 13KB - Virtual size: 12KB

.rdata
Size: 64KB - Virtual size: 64KB

.edata
Size: 5KB - Virtual size: 5KB

DATA
Size: 1KB - Virtual size: 13KB

.init
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 571B