a64452e2f701f0e420c541871437ef5cd95c974eb8f44ea712e05e3c103be95e

General

Target

a64452e2f701f0e420c541871437ef5cd95c974eb8f44ea712e05e3c103be95e
Size

55KB
MD5

a5a581dfe9225d05dac73fde0f1c7898
SHA1

47970a66a8322f62cf0affcc2eb2ffc05062370b
SHA256

a64452e2f701f0e420c541871437ef5cd95c974eb8f44ea712e05e3c103be95e
SHA512

6d30170c11eaeb3eebc74a50c4ddaa6258eb930bd73c795661922d1fef2cfd914dff799d39a9b1e13990bad3c1ba3345b075f8195c4b6143d7b64e1dd70c10bf
SSDEEP

768:XM8NUdK+P5KBFUFFsNeFVGPSBqz9lp1c7mmhwLcrEL+1DALIUxEtia4CtV6ym7:zNnQFlGX9/1c7BrEy1Do0ia4CXI7

Score

N/A

Malware Config

Signatures

Files

a64452e2f701f0e420c541871437ef5cd95c974eb8f44ea712e05e3c103be95e
.exe windows x86

7d76b72b6f868bfdfac4a1b785e45fca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetPrivateProfileIntA
CloseHandle
SetFilePointer
CreateFileA
GetVolumeInformationA
SetErrorMode
FreeLibrary
GetLogicalDrives
GetTickCount
lstrcpyA
lstrcatA
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
ExitProcess
ReadFile
GetPrivateProfileStringA
lstrcmpiA
lstrlenA
GetDriveTypeA
lstrcmpA

user32

GetAsyncKeyState
SendMessageA
GetWindowTextW
FindWindowA
DispatchMessageA
GetMessageA
MessageBoxA
CreateWindowExA
RegisterClassA
RegisterWindowMessageA
SetForegroundWindow
CharNextA
CharNextW
DestroyMenu
LoadImageA
DestroyIcon
DefWindowProcA
DestroyWindow
PostQuitMessage
SetTimer
CreatePopupMenu
GetCursorPos
InsertMenuItemA
TrackPopupMenu
EnableMenuItem
wsprintfA
SetMenuDefaultItem

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
Shell_NotifyIconW

nscrt

atoi

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d76b72b6f868bfdfac4a1b785e45fca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

nscrt

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 12KB

.rsrc Size: 45KB - Virtual size: 45KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 12KB

.rsrc
Size: 45KB - Virtual size: 45KB