c1b15a4765155e4306d8226548bef16ac4485216be2686623b16c034d324b55d

General

Target

c1b15a4765155e4306d8226548bef16ac4485216be2686623b16c034d324b55d
Size

314KB
MD5

fe0ce2a52bd013ed53c14d045455b769
SHA1

25610eecd28e39bf1c171818dd9766a2f96437bb
SHA256

c1b15a4765155e4306d8226548bef16ac4485216be2686623b16c034d324b55d
SHA512

6161842326f5729c0b7e4f6c529e26b476779e0c75f4622d061f5f1c466cb95b44aafde42140d3811b4350b61c354907f03cc9cab8260578beba1987dac790ef
SSDEEP

6144:uG/BRusgA9ZStl4cwP8NgwZcfxOdvL99Xz84hge2I:ppRBZZSD4lP8NZciL9Rpf2I

Score

N/A

Malware Config

Signatures

Files

c1b15a4765155e4306d8226548bef16ac4485216be2686623b16c034d324b55d
.exe windows x86

e520ce0e8daf3daafb0d7c9b4948882a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegQueryValueExA
RegSetValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegSetValueExA

user32

wsprintfA
TrackPopupMenuEx
GetParent
MessageBoxA
IsWindowVisible
GetWindowTextA
TranslateAcceleratorA
LoadCursorA
EndDialog
EnumWindowStationsW
SetRectEmpty
LoadStringA
RegisterClassA
FindWindowA
ClientToScreen
CharNextW
GetWindowTextLengthA
DialogBoxParamA
GetClientRect
CreateWindowExA
EnableMenuItem
SendMessageA
CreateDialogIndirectParamA
GetWindowLongA
CharPrevW
InvalidateRect

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CreateOleAdviseHolder

kernel32

lstrcpyA
IsBadWritePtr
GetCurrentThreadId
WideCharToMultiByte
FlushFileBuffers
LoadResource
FindResourceA
EnterCriticalSection
HeapAlloc
lstrcatA
ExitProcess
lstrlenW
LockResource
LeaveCriticalSection
HeapFree
GetProcessHeap
lstrlenA
HeapReAlloc

secur32

GetUserNameExW

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.venue
Size: 5KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e520ce0e8daf3daafb0d7c9b4948882a

Headers

File Characteristics

Imports

advapi32

user32

ole32

kernel32

secur32

Sections

.text Size: 206KB - Virtual size: 205KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 100KB - Virtual size: 100KB

.venue Size: 5KB - Virtual size: 78KB

.text
Size: 206KB - Virtual size: 205KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 100KB - Virtual size: 100KB

.venue
Size: 5KB - Virtual size: 78KB