d98b9ef8b67fb8f3f964842c815547956de29106cba631887231e07144cb7381

General

Target

d98b9ef8b67fb8f3f964842c815547956de29106cba631887231e07144cb7381
Size

111KB
MD5

71cfacbf704a4024a70c94d29b606aff
SHA1

07758035fe411171ee92a8afe8ab0a531cfe12d1
SHA256

d98b9ef8b67fb8f3f964842c815547956de29106cba631887231e07144cb7381
SHA512

a727c1da41f6370d9af95084c1b53b038e685add86124569c38283f9201c6f629f53105c1242817d459061218746e8e3751d8a1bc312ef477ac0db3134baf2ae
SSDEEP

1536:cRhl5LYqPKFT44DacOQ0GpKmjKloXbbw+G9VB9qfO/91mtf1DV2Ym7NCGJo:cRhzLY32cXKmjEoPiB9qf9fr2f

Score

N/A

Malware Config

Signatures

Files

d98b9ef8b67fb8f3f964842c815547956de29106cba631887231e07144cb7381
.exe windows x86

d41252a60e6ce0e7ed3705414ad4efa9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord6
FlatSB_GetScrollProp
PropertySheetA
ord13
FlatSB_EnableScrollBar

urlmon

RegisterMediaTypeClass

kernel32

GetModuleHandleA
GetProcAddress
OpenSemaphoreA
VirtualAlloc
ReleaseMutex
GetLastError
GetStartupInfoA
GetEnvironmentStrings
OpenEventA
OpenMutexA
GetTickCount
DeleteFileA
CreateSemaphoreA
ResumeThread
GetStdHandle
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
ReadFile
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
SetHandleCount
GetFileType
SetFilePointer
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
SetStdHandle
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 15B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d41252a60e6ce0e7ed3705414ad4efa9

Headers

File Characteristics

Imports

comctl32

urlmon

kernel32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 17KB - Virtual size: 26KB

.pdata Size: 512B - Virtual size: 15B

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 17KB - Virtual size: 26KB

.pdata
Size: 512B - Virtual size: 15B

.rsrc
Size: 45KB - Virtual size: 44KB