e388e02802e3eb140a5fe66e4616494e8f2857e1e014a4a01508915ac0faf61f

Sharing

Copy URL Twitter E-mail

General

Target

e388e02802e3eb140a5fe66e4616494e8f2857e1e014a4a01508915ac0faf61f
Size

856KB
MD5

29996993660d9b7ca1f8f23629275767
SHA1

50e8c295c88d6919e489a3edc7a96c5a774e51da
SHA256

e388e02802e3eb140a5fe66e4616494e8f2857e1e014a4a01508915ac0faf61f
SHA512

92cfec33cda97ff033a9dda2909fbaa80801058c9d5ce8378350e4918f5605fe22ee713b0a339a8fc0643ed262084b2184bdfdfd0e37cacf7cb152a7e1b4e31a
SSDEEP

12288:29kdl8qWWzLAfglYjWImpyOVoSSpWIYS/c8oeEugKMKilruAKtIePzENCmy1F:DmqnAfgDpJVAWLOoeE9BCdmWF

Score

N/A

Malware Config

Signatures

Files

e388e02802e3eb140a5fe66e4616494e8f2857e1e014a4a01508915ac0faf61f
.exe windows x86

d558a167a812c3cde761a7d89993d618

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetStdHandle
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

FindWindowA

advapi32

RegQueryValueExA

oleaut32

VariantChangeType

version

GetFileVersionInfoSizeA

gdi32

CreatePalette

comctl32

ImageList_Destroy

comdlg32

GetSaveFileNameA

Sections

Size: - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xinxin
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 740KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d558a167a812c3cde761a7d89993d618

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

comctl32

comdlg32

Sections

Size: - Virtual size: 324KB

Size: - Virtual size: 8KB

Size: - Virtual size: 4KB

Size: - Virtual size: 8KB

Size: 4KB - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: - Virtual size: 24KB

.rsrc Size: 104KB - Virtual size: 117KB

.data Size: - Virtual size: 424KB

.adata Size: - Virtual size: 4KB

.xinxin Size: - Virtual size: 8KB

.vmp0 Size: - Virtual size: 81KB

.vmp1 Size: 740KB - Virtual size: 737KB

.reloc Size: 4KB - Virtual size: 156B

.rsrc
Size: 104KB - Virtual size: 117KB

.data
Size: - Virtual size: 424KB

.adata
Size: - Virtual size: 4KB

.xinxin
Size: - Virtual size: 8KB

.vmp0
Size: - Virtual size: 81KB

.vmp1
Size: 740KB - Virtual size: 737KB

.reloc
Size: 4KB - Virtual size: 156B