f4780c72b526e7b2e1e75db685c8e8f688448880fa73fb54af3be82556ef10a8

Sharing

Copy URL Twitter E-mail

General

Target

f4780c72b526e7b2e1e75db685c8e8f688448880fa73fb54af3be82556ef10a8
Size

321KB
MD5

99f22115de6c1fb43e764a86f626957f
SHA1

3bbffd9538bf6147cd7b5f9a542c923b6c33b67f
SHA256

f4780c72b526e7b2e1e75db685c8e8f688448880fa73fb54af3be82556ef10a8
SHA512

a786783c576a3f517141a65002d82de28968224a2638d1975bf8508c8075361a453aa80e13dfbee808fbaf650c770be486c0b458b5eff3360eb9edda3f753926
SSDEEP

6144:OlvUvFfgVHmRmQ9RHD7vuVMsG0zVoCZs/dLkW9HuQ1xLUH:OlvMYfQ/j7v0MMpQkUHzT4

Score

N/A

Malware Config

Signatures

Files

f4780c72b526e7b2e1e75db685c8e8f688448880fa73fb54af3be82556ef10a8
.exe windows x86

05a02711b8eb6ecbcde1438cc461d4bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
Sleep
GetModuleHandleA
OpenMutexA
VirtualFree
GetCurrentThreadId
VirtualQuery
TlsGetValue
GetProcessHeap
LocalLock
LocalSize
GetLastError
GetProcAddress

user32

PostMessageA
SendMessageA

advapi32

CryptAcquireContextA

psapi

GetModuleBaseNameA

msvfw32

ICCompressorFree
DrawDibBegin
DrawDibSetPalette

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

05a02711b8eb6ecbcde1438cc461d4bb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

psapi

msvfw32

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 4KB - Virtual size: 716B

.data Size: 4KB - Virtual size: 60B

.tls Size: 4KB - Virtual size: 2KB

.rsrc Size: 203KB - Virtual size: 634KB

.sdata Size: 512B - Virtual size: 512B

.wdata Size: 512B - Virtual size: 512B

.rdata Size: 512B - Virtual size: 512B

.fdata Size: 512B - Virtual size: 512B

.mdata Size: 512B - Virtual size: 512B

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 4KB - Virtual size: 716B

.data
Size: 4KB - Virtual size: 60B

.tls
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 203KB - Virtual size: 634KB

.sdata
Size: 512B - Virtual size: 512B

.wdata
Size: 512B - Virtual size: 512B

.rdata
Size: 512B - Virtual size: 512B

.fdata
Size: 512B - Virtual size: 512B

.mdata
Size: 512B - Virtual size: 512B