79fa9e6d477cb249d9478a601cf4da926922051eadccf3a482d58f3acbd3b321

Sharing

Copy URL Twitter E-mail

General

Target

79fa9e6d477cb249d9478a601cf4da926922051eadccf3a482d58f3acbd3b321
Size

451KB
MD5

3f074e15a27e311c8ec959ee2b720199
SHA1

241b80d647c71bebcbec25cb667e184ee2a39ac2
SHA256

79fa9e6d477cb249d9478a601cf4da926922051eadccf3a482d58f3acbd3b321
SHA512

bfaef34035ca04eb0005c77894b8e782550f0f02961ca888695a051da96611530e7d3bf9f74bfdea84294983996b4663a05b89b3ec97dfcfe0c82c77db718edc
SSDEEP

12288:p4AHyz3snqRgZcCBX4vnu0X5MHYLDv3crrv1EbUE:p4myzuqSZ5kus5Pf+m

Score

N/A

Malware Config

Signatures

Files

79fa9e6d477cb249d9478a601cf4da926922051eadccf3a482d58f3acbd3b321
.exe windows x86

8350c15aea113f8f75f2f45e80b54968

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
EnumSystemLocalesA
IsDebuggerPresent
CopyFileA
RtlUnwind
GetStartupInfoA
SetEndOfFile
GetCurrentProcess
GetFileType
VirtualAlloc
LCMapStringA
InterlockedDecrement
HeapReAlloc
GetCurrentThread
GetConsoleCursorInfo
GetCommandLineA
CompareStringW
IsValidLocale
GetModuleFileNameA
EnterCriticalSection
GetProcessHeap
ExitProcess
FreeLibrary
GetOEMCP
GetStringTypeW
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetLocaleInfoA
CompareStringA
GetUserDefaultLCID
QueryPerformanceCounter
TlsAlloc
SetConsoleCtrlHandler
GetPrivateProfileStringA
MultiByteToWideChar
SetUnhandledExceptionFilter
lstrcpyA
HeapAlloc
GetEnvironmentStrings
HeapFree
UnhandledExceptionFilter
WriteFile
GetCurrentProcessId
CompareFileTime
GetStdHandle
GetLocaleInfoW
SetHandleCount
GetTimeZoneInformation
SetSystemTime
GetACP
GetStringTypeA
DeleteCriticalSection
TlsSetValue
SetEnvironmentVariableA
EnumTimeFormatsA
GetCurrentDirectoryA
WideCharToMultiByte
VirtualFree
TlsGetValue
RtlFillMemory
HeapCreate
LeaveCriticalSection
HeapDestroy
GlobalFix
GetLastError
GetTimeFormatA
GetProcAddress
GetCPInfo
GetDateFormatA
GetAtomNameA
InterlockedIncrement
InterlockedExchange
GetVersionExA
TlsFree
GetEnvironmentStringsW
VirtualQuery
Sleep
SetLastError
GetLogicalDriveStringsW
IsValidCodePage
GetCurrentThreadId
HeapSize
EnumResourceLanguagesA
TerminateProcess
FreeEnvironmentStringsW
InitializeCriticalSection
GetFileAttributesA
GetModuleHandleA
LCMapStringW

shell32

SHFileOperation
SHGetInstanceExplorer
SHInvokePrinterCommandA
SHLoadInProc
ShellExecuteEx
DoEnvironmentSubstW
CheckEscapesW

gdi32

ExtSelectClipRgn
DeleteColorSpace
GetPath
Ellipse
StrokePath
ScaleWindowExtEx
GdiPlayScript
SetTextAlign
GetCharWidth32W
GetTextExtentExPointA
SetGraphicsMode
CreateDCW

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8350c15aea113f8f75f2f45e80b54968

Headers

File Characteristics

Imports

kernel32

shell32

gdi32

Sections

.text Size: 130KB - Virtual size: 130KB

.data Size: 310KB - Virtual size: 309KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 130KB - Virtual size: 130KB

.data
Size: 310KB - Virtual size: 309KB

.rsrc
Size: 9KB - Virtual size: 9KB