82419f811b315fa947b24fdd652142ba182848f3aab5566be0aa08bc3b616a42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82419f811b315fa947b24fdd652142ba182848f3aab5566be0aa08bc3b616a42
Size

228KB
MD5

3d15eec56dea1aff787a59f734088ac3
SHA1

0450bd20b7d93ccf48848c553e8b930ed40fc565
SHA256

82419f811b315fa947b24fdd652142ba182848f3aab5566be0aa08bc3b616a42
SHA512

fddbc93d0fdc46c5a8f45c91bbb91aa69a2070a10e39d5a1c116b5153187f582f3e9b7c11946f6b7c678416a7c9d3b0960bbfe8d356136eb8c7d2385a0c2856a
SSDEEP

6144:rXmrT0o2KRbW5kngEpWj+gf/69XU1gJlsb2:ruTAKRCwpWV36p6gHq2

Score

N/A

Malware Config

Signatures

Files

82419f811b315fa947b24fdd652142ba182848f3aab5566be0aa08bc3b616a42
.exe windows x86

2a71d4f31a0049abe53363fda443e30e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipAlloc

kernel32

HeapFree
FindResourceA
LoadResource
SizeofResource
LockResource
GetProcessHeap
HeapAlloc
CreateFileW
WriteFile
CloseHandle
lstrcatW
OutputDebugStringW
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryW
LoadLibraryA

user32

UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
InvalidateRect
PostQuitMessage
SendMessageW
GetMessageW
wvsprintfW
EndPaint
FillRect
GetClientRect
BeginPaint
DispatchMessageW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ