6d80a42086c89745797f113138604dcbaeafb320e77efd8d46399ddd040be035

General

Target

6d80a42086c89745797f113138604dcbaeafb320e77efd8d46399ddd040be035
Size

260KB
MD5

f4c0c99a11bf3cf892ba254a86c2da33
SHA1

42c3ca7a7c81066123c2a72c9504938acbdde999
SHA256

6d80a42086c89745797f113138604dcbaeafb320e77efd8d46399ddd040be035
SHA512

6d546cc66a4d1b07430ef84562881cbc2deea57e2252e455a81dde5024faa91c798742aa048af012c67755bd20fd4d4673376821ffe2fb9da57ca4cb9c45c309
SSDEEP

3072:gacu3RB2TopDNXRXwzHgX5IermzUTqvApa/VAMIkPSVCZKea/JQP+1MObJ6RSe7n:ge3OIXJwjif6iHhM7QwBHs+kg

Score

N/A

Malware Config

Signatures

Files

6d80a42086c89745797f113138604dcbaeafb320e77efd8d46399ddd040be035
.exe windows x86

d867d31f7652e011a6d76ad83132d3dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LoadLibraryA
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
HeapReAlloc
ExitThread
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
HeapAlloc
SetUnhandledExceptionFilter
CloseHandle

user32

DefWindowProcA
SetWindowTextA
GetWindowTextA
PostQuitMessage
SendDlgItemMessageA
RegisterClassExA
LoadIconA
LoadCursorA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

GetStockObject

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ghoul
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.morph
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d867d31f7652e011a6d76ad83132d3dd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 24KB - Virtual size: 27KB

.ghoul Size: 180KB - Virtual size: 180KB

.morph Size: 8KB - Virtual size: 5KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 24KB - Virtual size: 27KB

.ghoul
Size: 180KB - Virtual size: 180KB

.morph
Size: 8KB - Virtual size: 5KB