905ddf7d745b5102d37d4c2d5b7dacf2b3da79f1b6cea09147d5f428f03b6772

General

Target

905ddf7d745b5102d37d4c2d5b7dacf2b3da79f1b6cea09147d5f428f03b6772
Size

448KB
MD5

4f9adc9401f9e0eed6947f2017fb9aa0
SHA1

88f8b6b18f26f29678f35f4d61b1a07a25bca0df
SHA256

905ddf7d745b5102d37d4c2d5b7dacf2b3da79f1b6cea09147d5f428f03b6772
SHA512

600b33b1d6475093d4ce29675cf5531933e7f134695f94f5fa4827db296e9fbc77521a9d8c34a849b7c9b76a1dff31c6bb083bf35d8468c6afbd5eb5488fcd67
SSDEEP

6144:/ZLlym+eXQtBVC+PaFFkC9etK3cf7Xk2G4fHjKdFruWEPEssGaeIaX48SZl6P8xs:hxlfgDUgoNewcfR9PEshIST8O

Score

N/A

Malware Config

Signatures

Files

905ddf7d745b5102d37d4c2d5b7dacf2b3da79f1b6cea09147d5f428f03b6772
.exe windows x86

67a698a9e9267a4db527acfcc4c2cc2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
IsBadReadPtr
GetNumberFormatA
GlobalAlloc
DeleteFileA
GetBinaryTypeA
GetCommandLineA
GetProcAddress
LoadLibraryA
GetComputerNameA
LocalFree
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
lstrcatA
CloseHandle
GetUserDefaultLangID
GetCurrentDirectoryA
HeapReAlloc
VirtualAlloc
WriteFile
LCMapStringW
FormatMessageW
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
RaiseException

user32

SetFocus
IsClipboardFormatAvailable
MessageBoxA
IsDlgButtonChecked
SetCursorPos
GetCursorPos
ClientToScreen
EmptyClipboard

gdi32

GetObjectType
DeleteDC
CreatePen

shell32

ShellExecuteA
FindExecutableA

imagehlp

MapFileAndCheckSumA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67a698a9e9267a4db527acfcc4c2cc2b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

imagehlp

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 75KB - Virtual size: 74KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 75KB - Virtual size: 74KB