5e0f2839892f0f7758a5900e06467be2fbe357108ccf97e42a7ebd5e1d3a48c0

General

Target

5e0f2839892f0f7758a5900e06467be2fbe357108ccf97e42a7ebd5e1d3a48c0
Size

441KB
MD5

da43811e4ba1d30d98f37e1ad0267d07
SHA1

6c82e955aca61162fa233fda60c79853ff3e1396
SHA256

5e0f2839892f0f7758a5900e06467be2fbe357108ccf97e42a7ebd5e1d3a48c0
SHA512

b94574cb927ac5374fa4298dadff3ed421c447c82e9b01eb074aea2b81c95a60e9c37411ef5770cabbb132acfb0d9e506946c927c96e88aca4dd825d4586daf4
SSDEEP

6144:icVHae4Tl+xFCDo1jclNvRYWJ23CLgTGDjIv35i7q//pZZJUJc:BVHBxt89723jTWkf5kqHpLqc

Score

N/A

Malware Config

Signatures

Files

5e0f2839892f0f7758a5900e06467be2fbe357108ccf97e42a7ebd5e1d3a48c0
.exe windows x86

ded83d9541fe2cff3e934c7c0db2f9ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
GetWindowTextLengthA
SystemParametersInfoA
GetSystemMetrics
BeginPaint
FrameRect
MapWindowPoints
ClientToScreen
PostMessageA
DestroyMenu
InvalidateRect
SetWindowsHookExA
ValidateRect

kernel32

Sleep
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetProcAddress
GetNativeSystemInfo
SetSystemTimeAdjustment
GetSystemTimeAsFileTime
HeapAlloc
GetLastError
HeapReAlloc
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ded83d9541fe2cff3e934c7c0db2f9ef

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 190KB - Virtual size: 189KB

.data Size: 168KB - Virtual size: 229KB

.rsrc Size: 10KB - Virtual size: 10KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 190KB - Virtual size: 189KB

.data
Size: 168KB - Virtual size: 229KB

.rsrc
Size: 10KB - Virtual size: 10KB