29af823e4fe4719d3ac9d04dbd0c58f54ad2c19cc7492202765678cba2080a6d

General

Target

29af823e4fe4719d3ac9d04dbd0c58f54ad2c19cc7492202765678cba2080a6d
Size

92KB
MD5

6fdde139c2094cda0b5fb523dadfb05c
SHA1

83f539ec9eb7d520c97e39662dc162af51dc70a5
SHA256

29af823e4fe4719d3ac9d04dbd0c58f54ad2c19cc7492202765678cba2080a6d
SHA512

e3dba0bb1a56f7698585fcafa4f2ca79738b628eeea29fa3ea9701d4b7c47b4749fffa5a66ec88c732e647c7cf750eb2e176bf1a62d3a25ea9e8e0f71ce0435e
SSDEEP

1536:jZ5NFC6kBwRW0zyPdOpQ6SkTTLHWoqpm+RZLVyvXOA+Ir4ekyl6zcM9btOb:vNFBkBuuPgpDtHW3zzQLN4Q6YM9btOb

Score

N/A

Malware Config

Signatures

Files

29af823e4fe4719d3ac9d04dbd0c58f54ad2c19cc7492202765678cba2080a6d
.exe windows x86

41fee858abdefe308dcfab128f3e3eb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory
ExitProcess
VirtualAlloc
lstrcmpiA
HeapAlloc
LockFile
GetProcAddress
LoadLibraryA
IsBadReadPtr
AssignProcessToJobObject
GetProcessHeap
CreateNamedPipeW
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CreateIcon

gdi32

BitBlt
SetGraphicsMode

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

41fee858abdefe308dcfab128f3e3eb6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 16KB - Virtual size: 14KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 16KB - Virtual size: 14KB