937338147dede7c79f0c839e8e978ff9d26d472946ef742c7c9b4bf00acd60d7

General

Target

937338147dede7c79f0c839e8e978ff9d26d472946ef742c7c9b4bf00acd60d7
Size

174KB
MD5

dfd95c3a35593d96eecd3f36b8a88bc9
SHA1

2154d638f8c977d0ddd77911f1c5610b4f4591e4
SHA256

937338147dede7c79f0c839e8e978ff9d26d472946ef742c7c9b4bf00acd60d7
SHA512

77a4d6bd4bbf86dcc3fd3ef1eb492eadcf8e858c0e040dcfed49c6ecbfa778b623fa52eb90451190fe81821106328bff0ee978833d5dbd25599b3ccad08a79b3
SSDEEP

3072:rx53SeT+hXSaBdXFV2rZXM1z9+QsOzwEggwCK3D80:r73b+TLXF0ry14Ozwd

Score

N/A

Malware Config

Signatures

Files

937338147dede7c79f0c839e8e978ff9d26d472946ef742c7c9b4bf00acd60d7
.exe windows x86

cd1ed424705a771b26338671d1d94d50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
SetEvent
VirtualFree
GetProcessHeap
WriteFile
TerminateThread
CreateEventA
HeapDestroy
HeapCreate
ReadFile
lstrcatA
GetThreadLocale
VirtualAlloc
ResetEvent
OpenEventA
HeapFree
WaitForMultipleObjects
ConvertDefaultLocale
GetModuleHandleA
VirtualProtect
GetVersionExA
CloseHandle
GetVersion
CreateThread
lstrcpyA
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
SetEndOfFile
VirtualQuery
lstrlenA
GetFileSize
CreateFileA
HeapReAlloc
AddAtomA
ExitProcess

user32

DrawIcon
SendMessageA
LoadIconA
CreateWindowExA
DefWindowProcA
RegisterClassExA
GetMessageA
DestroyWindow
TranslateMessage
SetWindowPos
ShowWindow
DispatchMessageA
BroadcastSystemMessageA
LoadImageA
MoveWindow

comdlg32

CommDlgExtendedError
ChooseFontA
ChooseColorA

advapi32

RegCloseKey
RegGetValueA
RegSetValueA
RegCreateKeyExA

shell32

SHGetSettings
SHGetDiskFreeSpaceExA
SHGetMalloc
SHGetDesktopFolder

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd1ed424705a771b26338671d1d94d50

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

shell32

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 65KB - Virtual size: 533KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 65KB - Virtual size: 533KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 2KB - Virtual size: 2KB