a0bf181817b33447be00b5fb7be6a7fb184153c907f7784555acdc0dc5dbcf2a

General

Target

a0bf181817b33447be00b5fb7be6a7fb184153c907f7784555acdc0dc5dbcf2a
Size

114KB
MD5

b5d588ec6e34f8371d7b0eb3379dcd7d
SHA1

72f466d7d4c541d0fc784ac0e12d8ec6c778d679
SHA256

a0bf181817b33447be00b5fb7be6a7fb184153c907f7784555acdc0dc5dbcf2a
SHA512

83fdc619aa32bd711d756f61878f36fd224479701a527c5d90d8618abca33164587bed11e1e3d402c0b1b9da8775f57683ff635c2890aec759b3c2b6b0465b51
SSDEEP

3072:igZLeJgoSj+IlV2VKkiSfXXF/dEgPClYDU2YY:igZogBGKzSfFiga6Yd

Score

N/A

Malware Config

Signatures

Files

a0bf181817b33447be00b5fb7be6a7fb184153c907f7784555acdc0dc5dbcf2a
.exe windows x86

bdff84d0a89a574ec296e38ecd958650

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
TranslateMessage
GetParent
GetDesktopWindow
CharNextA

kernel32

GetModuleHandleA
GetWindowsDirectoryA
lstrlenW
GetCommandLineW
MulDiv
GetCommandLineA
GlobalFindAtomW
RemoveDirectoryA
GetCurrentProcess
GetVersion
GetOEMCP
lstrcmpiA
GlobalFindAtomA
GetCurrentProcessId
GetCurrentThread
DeleteFileW
GetUserDefaultLangID
GetDriveTypeA
GetConsoleOutputCP
DeleteFileA
GetCurrentThreadId
lstrcmpiW
GetThreadLocale
GetTickCount
GetACP
lstrlenA
GetProcessHeap
SetCurrentDirectoryA
GetModuleHandleW
lstrcmpA
CopyFileA
IsDebuggerPresent
RemoveDirectoryW
GetStartupInfoA
VirtualAlloc
VirtualFree

gdi32

GetTextMetricsA
CreatePalette
SelectPalette
CreateCompatibleDC
SetTextAlign
GetObjectA
SetMapMode
GetStockObject
SetStretchBltMode
SetTextColor
CreatePen
GetPixel
DeleteDC
SaveDC
GetDeviceCaps
GetClipBox
RestoreDC
DeleteObject
RectVisible
CreateFontIndirectA
CreateSolidBrush
PatBlt
SetPixel
SelectObject
LineTo

glu32

gluQuadricCallback

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdff84d0a89a574ec296e38ecd958650

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 12KB - Virtual size: 12KB