96aba7d791416206d41422c235abec95cf5bfaa393baae13596520edcebe089f

Sharing

Copy URL Twitter E-mail

General

Target

96aba7d791416206d41422c235abec95cf5bfaa393baae13596520edcebe089f
Size

980KB
MD5

6bb8464e67cc2896061f49badd23db02
SHA1

f9741c9d153de48d12a70816f4a480dd03e825c4
SHA256

96aba7d791416206d41422c235abec95cf5bfaa393baae13596520edcebe089f
SHA512

22fd0cbec3f06234df76a7b45bfa894d69924a9131c01d449e9d8c384f9395f128dee86ab5ea34703f7cd7440c5951d0e6fe4a0b97f65328e262f7672025eaba
SSDEEP

24576:ZnLjgL9NmiO67MsGAECd5NwFven+tBiFLciA:Zn4yiOgMseCd5Nws+tyLci

Score

N/A

Malware Config

Signatures

Files

96aba7d791416206d41422c235abec95cf5bfaa393baae13596520edcebe089f
.exe windows x86

f4e20f2dfdaa6827711b168087817dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrlenA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

TranslateMessage
MessageBoxA

advapi32

RegCloseKey

oleaut32

VariantChangeType

version

GetFileVersionInfoA

gdi32

SetStretchBltMode

comctl32

ImageList_Destroy

setupapi

SetupDiDestroyDeviceInfoList

hid

HidP_GetCaps

Sections

CODE
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XyA0
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XyA1
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.XyA2
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4e20f2dfdaa6827711b168087817dd4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

comctl32

setupapi

hid

Sections

CODE Size: 360KB - Virtual size: 359KB

DATA Size: 6KB - Virtual size: 5KB

BSS Size: - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.XyA0 Size: 25KB - Virtual size: 24KB

.rsrc Size: 158KB - Virtual size: 158KB

.XyA1 Size: 309KB - Virtual size: 309KB

.XyA2 Size: 85KB - Virtual size: 84KB

.reloc Size: 26KB - Virtual size: 25KB

CODE
Size: 360KB - Virtual size: 359KB

DATA
Size: 6KB - Virtual size: 5KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.XyA0
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 158KB - Virtual size: 158KB

.XyA1
Size: 309KB - Virtual size: 309KB

.XyA2
Size: 85KB - Virtual size: 84KB

.reloc
Size: 26KB - Virtual size: 25KB