a3c69a884f2960436a3a5767cbd0ae98695e40a42bbc320d3b361614990f51fc

Sharing

Copy URL Twitter E-mail

General

Target

a3c69a884f2960436a3a5767cbd0ae98695e40a42bbc320d3b361614990f51fc
Size

126KB
MD5

cda158eb1b5dd58fd1e412174dce4f57
SHA1

4265a3d308e1c7c20f10d2c11eecb4f377971c73
SHA256

a3c69a884f2960436a3a5767cbd0ae98695e40a42bbc320d3b361614990f51fc
SHA512

ea25d73560468a7d2d77601c2b18e87827fdb4d8f7cada5f660b42fc013caa8567be9b491d9afb1950706c4e8aff9666f7167f4d9a77ded0580b4fbc40c3a8aa
SSDEEP

3072:0ZvGCj3Esh9jVCm5kHfYq6m0HNcbDznJW4KA5VjL:0kCLEsh9jV5OHfMBNcfDJjZ

Score

N/A

Malware Config

Signatures

Files

a3c69a884f2960436a3a5767cbd0ae98695e40a42bbc320d3b361614990f51fc
.exe windows x86

ca5205d29d2e0fa326b0238a3aaed518

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
GetModuleHandleA
GetProcAddress
VirtualProtect

user32

GetKeyboardType
MessageBoxA

advapi32

RegQueryValueExA

Sections

CODE
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 884B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca5205d29d2e0fa326b0238a3aaed518

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

CODE Size: - Virtual size: 12KB

DATA Size: - Virtual size: 164B

BSS Size: - Virtual size: 1KB

.idata Size: - Virtual size: 1KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.vmp0 Size: - Virtual size: 884B

.rsrc Size: 512B - Virtual size: 88KB

.vmp1 Size: - Virtual size: 13KB

.vmp2 Size: 123KB - Virtual size: 123KB

.reloc Size: 512B - Virtual size: 148B

CODE
Size: - Virtual size: 12KB

DATA
Size: - Virtual size: 164B

BSS
Size: - Virtual size: 1KB

.idata
Size: - Virtual size: 1KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.vmp0
Size: - Virtual size: 884B

.rsrc
Size: 512B - Virtual size: 88KB

.vmp1
Size: - Virtual size: 13KB

.vmp2
Size: 123KB - Virtual size: 123KB

.reloc
Size: 512B - Virtual size: 148B