Smaller[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Smaller.exe
Size

3.8MB
MD5

494e03d339c4b84f71f0c122de940860
SHA1

85152244f96b8a76ece7a26ba1db4eded3715b80
SHA256

6511d09ada2bc11a95c06bd20abb66f450b9b2a6ed1f00c723401884ce7a2e61
SHA512

5acc6fad0a576e16cb23d3058e9e186ee8bac9957c22bb6ba0c71214261596b627506a7f07f8d29b53d605762e45bed36cf48123f94d4a510f98cc1b1bf85c61
SSDEEP

98304:aVZ0gaAV265MWQT+VagEfsjjTNKBxeY19ICtHm:C3h2ChRogXjXNKBxemtHm

Score

1^/10

Malware Config

Signatures

Files

Smaller.exe
.exe windows x86

acbbb57a9e219cbd48d9ce15a64944ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
AreFileApisANSI
DeleteCriticalSection
EnterCriticalSection
FreeConsole
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcrt

__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

user32

AppendMenuA
CallWindowProcA
CharLowerBuffA
CharUpperA
CheckDlgButton
CheckMenuItem
CheckMenuRadioItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CreateDialogParamA
CreatePopupMenu
DefDlgProcA
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
EmptyClipboard
EnableMenuItem
EndDialog
EnumClipboardFormats
GetActiveWindow
GetClassInfoA
GetClientRect
GetClipboardData
GetCursorPos
GetDlgItem
GetDlgItemTextA
GetMenu
GetMessageA
GetSubMenu
GetSysColor
GetSystemMenu
GetWindowPlacement
GetWindowRect
InsertMenuItemA
InvalidateRect
IsDialogMessageA
IsDlgButtonChecked
IsMenu
KillTimer
LoadAcceleratorsA
LoadCursorA
LoadIconA
MessageBoxA
MoveWindow
OpenClipboard
PostMessageA
PostQuitMessage
RegisterClassA
RemoveMenu
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetClipboardData
SetDlgItemInt
SetDlgItemTextA
SetFocus
SetMenuItemInfoA
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowTextA
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
wsprintfA

Sections

.text
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Dvg
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jzw
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$"Z
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acbbb57a9e219cbd48d9ce15a64944ff

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: - Virtual size: 7KB

.data Size: - Virtual size: 339KB

.rdata Size: - Virtual size: 2KB

.eh_fram Size: - Virtual size: 2KB

.bss Size: - Virtual size: 288B

.idata Size: - Virtual size: 3KB

.CRT Size: - Virtual size: 48B

.tls Size: - Virtual size: 8B

.Dvg Size: - Virtual size: 1.7MB

.jzw Size: 1024B - Virtual size: 884B

.$"Z Size: 3.8MB - Virtual size: 3.8MB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 7KB

.data
Size: - Virtual size: 339KB

.rdata
Size: - Virtual size: 2KB

.eh_fram
Size: - Virtual size: 2KB

.bss
Size: - Virtual size: 288B

.idata
Size: - Virtual size: 3KB

.CRT
Size: - Virtual size: 48B

.tls
Size: - Virtual size: 8B

.Dvg
Size: - Virtual size: 1.7MB

.jzw
Size: 1024B - Virtual size: 884B

.$"Z
Size: 3.8MB - Virtual size: 3.8MB

.reloc
Size: 1KB - Virtual size: 1KB