4ea02444d00eb7423ec263ecbb4d128bcdb39305ac5c1082502fe91ca3e3469e

Sharing

Copy URL Twitter E-mail

General

Target

4ea02444d00eb7423ec263ecbb4d128bcdb39305ac5c1082502fe91ca3e3469e
Size

478KB
MD5

9d0beb333ff6e9f3a4ba983a6e6fec43
SHA1

a2694cdcac6630bdf31591c45509900ab7d86820
SHA256

4ea02444d00eb7423ec263ecbb4d128bcdb39305ac5c1082502fe91ca3e3469e
SHA512

94dd577984545d974a8a34985e8eb997ce6dd0ac57a9b74640baebcdc1e7a49a221d7d28962ba43e91216f4d6b07e517541681c4db64c100ddbb8909147dd34c
SSDEEP

6144:CM9f0ohmSbVUKA+nh9DE/mnqWSPJqtixLztJsofinlyXr+PUq5LG:B9f0ooSRUrS9nu5JsSilj

Score

N/A

Malware Config

Signatures

Files

4ea02444d00eb7423ec263ecbb4d128bcdb39305ac5c1082502fe91ca3e3469e
.exe windows x86

aa8010309469a449892148bca06cb4d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
CommDlgExtendedError
ReplaceTextW
ChooseFontW
GetSaveFileNameW

comctl32

ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_DragShowNolock

kernel32

SetStdHandle
CreateFileA
GetOEMCP
GlobalFree
GetWindowsDirectoryW
PrepareTape
FindCloseChangeNotification
VirtualProtect
SetErrorMode
GetCurrentProcessId
DeviceIoControl
GetFileTime
MoveFileExW
FindFirstChangeNotificationW
CreatePipe
GlobalAlloc
RemoveDirectoryW
LoadLibraryW
GlobalUnlock
GetLocaleInfoW
TlsGetValue
TlsAlloc
WaitForSingleObject
FindNextChangeNotification
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetVersionExA
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

Sections

.text
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aa8010309469a449892148bca06cb4d2

Headers

File Characteristics

Imports

comdlg32

comctl32

kernel32

Sections

.text Size: 281KB - Virtual size: 281KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 164KB - Virtual size: 238KB

.text
Size: 281KB - Virtual size: 281KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 164KB - Virtual size: 238KB