2d37267eb6f2b7a6724681e1d1568892b70e8b83f2b35d06450cd0447b5eec23

General

Target

2d37267eb6f2b7a6724681e1d1568892b70e8b83f2b35d06450cd0447b5eec23
Size

400KB
MD5

3f3287644c24257660cc99a87243ab18
SHA1

4837681d4e531f327f9ab31b24dff6e962a34825
SHA256

2d37267eb6f2b7a6724681e1d1568892b70e8b83f2b35d06450cd0447b5eec23
SHA512

f1582f41a834df0e3720b2ed9479946fa803c9bb7f687f4eaefb9eb69bad7f7c1d123193c61f3787e2508e7c3d90aa68ee797a0d3e59c15a97b36ad41f69f8d0
SSDEEP

6144:ebIMZGAM5ErufkxZh2UYPEg4BrHMcE4yct2z1uTRv7oBxKIawJlQ1+X5s6tLBEOB:ebMj5Fkxdg4BvE4UGUrlIDO4AH66

Score

N/A

Malware Config

Signatures

Files

2d37267eb6f2b7a6724681e1d1568892b70e8b83f2b35d06450cd0447b5eec23
.exe windows x86

b023edf57497a8e67f85d3028b137beb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
SetEndOfFile
SetEnvironmentVariableA
LocalAlloc
GetCurrentProcess
GetCurrentThreadId
LeaveCriticalSection
InterlockedExchange
SetLastError
SetProcessShutdownParameters
FlushInstructionCache
GetProcessShutdownParameters
GetCurrentProcessId
InterlockedDecrement
GetLastError
DeleteCriticalSection
HeapFree
CloseHandle
GetProcessHeap
HeapAlloc
VirtualFree
VirtualQueryEx
VirtualAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
LCMapStringA
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

user32

TranslateMessage
GetClientRect
OffsetRect
CharUpperA
GetKeyState
IsWindow
GetWindowModuleFileNameA

msimg32

TransparentBlt

gdi32

GetBkColor
BitBlt
SelectObject
GetBkMode
GetTextColor
EnumFontFamiliesA
SetTextCharacterExtra

Sections

.text
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b023edf57497a8e67f85d3028b137beb

Headers

File Characteristics

Imports

kernel32

user32

msimg32

gdi32

Sections

.text Size: 257KB - Virtual size: 256KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 446KB

.rsrc Size: 5KB - Virtual size: 8KB

.text
Size: 257KB - Virtual size: 256KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 446KB

.rsrc
Size: 5KB - Virtual size: 8KB