1976e96a67a974babac94c026e198adba6af26720628ecae8ec46c21c6643983

General

Target

1976e96a67a974babac94c026e198adba6af26720628ecae8ec46c21c6643983
Size

376KB
MD5

b0b19a0b4e9b8db11e1ea354f628b733
SHA1

4922f15f15779a75c66dbfa1462574a82bfe0391
SHA256

1976e96a67a974babac94c026e198adba6af26720628ecae8ec46c21c6643983
SHA512

21da50e519c876cf2735fdb6e55c337b4f14d3e277abee41fd4cba4dbfb284daf49029ea7410d97ffc55555117b9abf05af739ae51e38a942785457e42ae1cb3
SSDEEP

6144:tbsIusWrga4qsUAm1agP/rnLGjHfALY52bXlky3VXhSWkR90PBtuUvX9GCp:tbsIHGbsUxZuj/AM52bXlk2jXy90PSC

Score

N/A

Malware Config

Signatures

Files

1976e96a67a974babac94c026e198adba6af26720628ecae8ec46c21c6643983
.exe windows x86

202f9b8f50ffd3d5a5ffccd658481aa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
VirtualUnlock
GetModuleHandleA
VirtualAlloc
GetProcAddress
VirtualFree
GetProcessHeap
GetLocalTime
GetLastError
InterlockedExchange
GetSystemInfo
VirtualProtect
GetLocaleInfoA
HeapSize
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind
VirtualQuery

user32

GetDesktopWindow

winmm

joySetCapture

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

202f9b8f50ffd3d5a5ffccd658481aa8

Headers

File Characteristics

Imports

kernel32

user32

winmm

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 320KB - Virtual size: 699KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 320KB - Virtual size: 699KB

.rsrc
Size: 8KB - Virtual size: 7KB