fb7358b9059038621f2d9c9dfa50bf1d08e317cc64cc87084ad13ece2b67f9fc

General

Target

fb7358b9059038621f2d9c9dfa50bf1d08e317cc64cc87084ad13ece2b67f9fc
Size

97KB
MD5

2c948e4e0ff368c11f49627db65065be
SHA1

ff6e181dc430e6bb63c02c1f3aa74314bb601aa2
SHA256

fb7358b9059038621f2d9c9dfa50bf1d08e317cc64cc87084ad13ece2b67f9fc
SHA512

fe801f47e0f9417489b194a2c3c00c21a12eead4f9dbc1a4d21c1908ae73721012d0eb9078c2ef69f8c2cebfe5dc81316c40eb1d54b53d107b2d56cbd5c02e74
SSDEEP

1536:51IjsLmIDpsg34biwAz90VbNj7tdAzXof1tqkzOO5cSi4iXHifKvtoti:5ajsbSgKAz9CdAzXE1YXPOKvtoti

Score

N/A

Malware Config

Signatures

Files

fb7358b9059038621f2d9c9dfa50bf1d08e317cc64cc87084ad13ece2b67f9fc
.exe windows x86

6d20643210585460c48340f02dc73568

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA

advapi32

RegQueryValueExW
InitializeAcl
RegDeleteValueA
RegEnumKeyExW
AllocateAndInitializeSid
RegDeleteKeyA
RegEnumKeyExA
FreeSid
RegSetValueExA
LookupPrivilegeValueA
RegDeleteValueW

gdi32

PlayMetaFileRecord
CreateDCW
UnrealizeObject
StretchBlt
PolyBezierTo
CreatePen
SetRectRgn
LPtoDP
RealizePalette
GetStockObject
BitBlt
TextOutA
GetCurrentPositionEx
GetTextAlign
AngleArc
CreatePalette

comctl32

ImageList_AddMasked
InitCommonControlsEx
InitCommonControls
CreateToolbarEx
ImageList_ReplaceIcon
ImageList_Create
PropertySheetA

msvcrt

_lock
_wtol
_mbsicmp
?terminate@@YAXXZ
fputc
_open_osfhandle
_wcsicmp
memcpy
??2@YAPAXI@Z
realloc
__p___initenv
__setusermatherr
_adjust_fdiv
bsearch
_strcmpi
_XcptFilter
wcstol
iswctype

kernel32

SetThreadPriority
GetTempFileNameA
GlobalUnlock
LocalAlloc
DeleteCriticalSection
ExitProcess
GetLastError
VirtualAlloc
CloseHandle

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d20643210585460c48340f02dc73568

Headers

File Characteristics

Imports

version

advapi32

gdi32

comctl32

msvcrt

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 36KB - Virtual size: 86KB

.idata Size: 10KB - Virtual size: 23KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 36KB - Virtual size: 86KB

.idata
Size: 10KB - Virtual size: 23KB

.rsrc
Size: 20KB - Virtual size: 19KB