d6c3b7994077cd456af5fea92f1563f10b73729d82b45dc7b0ae9126c824dcd0

Sharing

Copy URL Twitter E-mail

General

Target

d6c3b7994077cd456af5fea92f1563f10b73729d82b45dc7b0ae9126c824dcd0
Size

215KB
MD5

6bb298f9d30bb3f5b98364addfa26581
SHA1

7d29ec498c98f14dfb1133c9795c720b9eee63cb
SHA256

d6c3b7994077cd456af5fea92f1563f10b73729d82b45dc7b0ae9126c824dcd0
SHA512

25ef9904031891266286dce7b80d7d080cebe50387d330482799fc8e6e10feaa561f5bfaf5b6c392069f9650b970db8a2595f5af281eef69ef2aacf2244bc95f
SSDEEP

3072:K0NiB49RpbQ5NtoCDpcroSREvsGXipBvI7txHw0sGqJk9AC93:rvQNaCDp4oO6skkBv6Q9DY

Score

N/A

Malware Config

Signatures

Files

d6c3b7994077cd456af5fea92f1563f10b73729d82b45dc7b0ae9126c824dcd0
.exe windows x86

4649f6a773790a1e9476769c0937b52e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegEnumKeyExA

kernel32

IsBadHugeReadPtr
LoadLibraryA
GetVersionExA
LoadLibraryExA
ExitThread
LocalAlloc
GlobalAlloc
VirtualAlloc
ExitProcess
VirtualAllocEx
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetLastError

user32

ScrollWindow
PostQuitMessage
ReleaseCapture
RemovePropA
PostMessageA
PeekMessageA

gdi32

CreateCompatibleBitmap
CreateBitmap
SaveDC
CopyEnhMetaFileA
BitBlt

Sections

CODE
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC9
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC5
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RSRC7
Size: 1024B - Virtual size: 933B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RSRC4
Size: 1024B - Virtual size: 647B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RSRC0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4649f6a773790a1e9476769c0937b52e

Headers

File Characteristics

Imports

advapi32

kernel32

user32

gdi32

Sections

CODE Size: 67KB - Virtual size: 67KB

.data Size: 136KB - Virtual size: 135KB

RSRC2 Size: 1KB - Virtual size: 1KB

RSRC6 Size: 1KB - Virtual size: 1KB

RSRC9 Size: 512B - Virtual size: 35B

RSRC5 Size: 1024B - Virtual size: 816B

RSRC7 Size: 1024B - Virtual size: 933B

RSRC4 Size: 1024B - Virtual size: 647B

RSRC0 Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 932B

CODE
Size: 67KB - Virtual size: 67KB

.data
Size: 136KB - Virtual size: 135KB

RSRC2
Size: 1KB - Virtual size: 1KB

RSRC6
Size: 1KB - Virtual size: 1KB

RSRC9
Size: 512B - Virtual size: 35B

RSRC5
Size: 1024B - Virtual size: 816B

RSRC7
Size: 1024B - Virtual size: 933B

RSRC4
Size: 1024B - Virtual size: 647B

RSRC0
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 932B