f4512c79313a1dc089a500a6aaedf18f94b5e58303832d97eced8c21347439eb

General

Target

f4512c79313a1dc089a500a6aaedf18f94b5e58303832d97eced8c21347439eb
Size

19KB
MD5

c25e08ef61008ff1d67b06d6da1e8359
SHA1

e940ffa560c0cee2e84fdff809f3ec671a62a6c0
SHA256

f4512c79313a1dc089a500a6aaedf18f94b5e58303832d97eced8c21347439eb
SHA512

9ff372578b994daa20b4d9ba18277cfc9d077a9009b4c3932c8f9e0bcc59a3337e83030a92cac4f6b678e90a39876110efee5e7fe761cba53154c66f2ad79620
SSDEEP

384:sVCcAeKLUuTRoImr6MLEj/7V69Wx1Wfk0Sds:sVhZImr6MLsA0D0F

Score

N/A

Malware Config

Signatures

Files

f4512c79313a1dc089a500a6aaedf18f94b5e58303832d97eced8c21347439eb
.exe windows x86

058e19d582fdafca58938493abcfd0cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
GetModuleHandleW
GetStartupInfoA
LoadLibraryW
CreateFileW
GetProcessHeap
RtlUnwind
IsDebuggerPresent

user32

wsprintfW
UpdateWindow
TranslateMessage
ShowWindow
SetWindowTextW
RegisterWindowMessageW
PeekMessageW
OpenClipboard
LoadIconW
IsZoomed
IsDialogMessageW
IsClipboardFormatAvailable
GetWindowPlacement
GetClipboardData
EnumChildWindows
EnableWindow
DispatchMessageW
DestroyWindow
CreateDialogParamW
CloseClipboard
CallNextHookEx

gdi32

BitBlt
DeleteDC
CreateSolidBrush
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
Escape
ExtTextOutW
GetDeviceCaps
GetStockObject
GetTextExtentPoint32W
GetTextExtentPointW
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
DeleteObject

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

te1xt1
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

058e19d582fdafca58938493abcfd0cd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 44KB

te1xt1 Size: 512B - Virtual size: 1B

.text2 Size: 7KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 44KB

te1xt1
Size: 512B - Virtual size: 1B

.text2
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 4KB