786932f10535bf24d2197e93c298f648c013da172aa577ef82742e29f0e8a9b9

Sharing

Copy URL Twitter E-mail

General

Target

786932f10535bf24d2197e93c298f648c013da172aa577ef82742e29f0e8a9b9
Size

197KB
MD5

4846a46718ff16a8a27d4041bdf45c83
SHA1

411269d2bf8fffb1f11edf0a87d00a3ad3b8258a
SHA256

786932f10535bf24d2197e93c298f648c013da172aa577ef82742e29f0e8a9b9
SHA512

d0ce0bf57736d406acf83750e4a2d3ca37f747cc30bdaaa9bd81c1fb05fbd72c558f6f412c271f8c05fc72b9a0d5a2cb984a536f210ad58a81843cecf9a1af40
SSDEEP

3072:aPy6ILX2CjE8Q5c6D8HFZqTTeTTTfqTTTJTTTTTnTTTTTThqTTTTTTfLTTTTTTTz:adI/I8Q5c6QHFZlxH/PUoyjy+nE0ve

Score

N/A

Malware Config

Signatures

Files

786932f10535bf24d2197e93c298f648c013da172aa577ef82742e29f0e8a9b9
.exe windows x86

98cb53f58e2843e337cfb450b38ad00f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringA
WaitForSingleObject
Sleep
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
OpenProcess
CreateProcessA
GetModuleFileNameA
CloseHandle
GetStartupInfoA

user32

GetWindowPlacement
SetWindowTextA
GetDesktopWindow
CopyRect
OffsetRect
GetWindowTextA
GetClientRect
GetDC
DrawTextA
GetWindowRect
GetWindowThreadProcessId
SetWindowPos
ReleaseDC
GetDlgItem
SystemParametersInfoA
LoadIconA
SendMessageA
SetTimer
SendDlgItemMessageA
EndDialog
DialogBoxParamA
FindWindowA

gdi32

SelectObject
CreateFontIndirectA
DeleteObject

wsock32

ntohl

advapi32

OpenProcessToken

comctl32

InitCommonControlsEx

shell32

ShellExecuteA

msvcrt

_controlfp
_write
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
_read
_close
_fstat
_stat
__dllonexit
_fdopen
_stricmp
_except_handler3
_errno
strrchr
_access
vfprintf
remove
_chmod
_snprintf
_mkdir
_purecall
free
??3@YAXPAX@Z
malloc
strlen
_beginthreadex
atoi
fprintf
_iob
fopen
fclose
strcpy
_chdir
_putenv
??2@YAPAXI@Z
strcmp
__p___argc
__p___argv
memcmp
_open
fwrite
memset
_ftol
fseek
fread
memcpy
exit

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

98cb53f58e2843e337cfb450b38ad00f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

wsock32

advapi32

comctl32

shell32

msvcrt

Sections

.text Size: 21KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 6KB - Virtual size: 6KB

.rsrc Size: 92KB - Virtual size: 91KB

.rrdata Size: 68KB - Virtual size: 68KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 92KB - Virtual size: 91KB

.rrdata
Size: 68KB - Virtual size: 68KB