8632b4d4431c0c2719a28369eeee59ff5d439de8ab8b85c66e6ae521db3442f5

General

Target

8632b4d4431c0c2719a28369eeee59ff5d439de8ab8b85c66e6ae521db3442f5
Size

562KB
MD5

8daf865b34bae234450abee75e1ff451
SHA1

e123f65a8e4a8a8b9d252605955da228436cbc23
SHA256

8632b4d4431c0c2719a28369eeee59ff5d439de8ab8b85c66e6ae521db3442f5
SHA512

4ac12070541d562930fe1ecc4a8439a08f9509006f221941418476e2955c1ac9b911254b35d69d142f98a1cdf4fe0e01b3939858e9f0f50de96afe40e6204d8f
SSDEEP

12288:sniMPrwh19aiB7UZWIDmk7FFOYtFJ6H9dKtKTBZf:uiMPr4rIDmyFDwCtSBZ

Score

N/A

Malware Config

Signatures

Files

8632b4d4431c0c2719a28369eeee59ff5d439de8ab8b85c66e6ae521db3442f5
.exe windows x86

ebc0ca79a6d14681760a279f3396eb1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLocale
SetLastError
TlsFree
GetEnvironmentStrings
GetProcAddress
TlsGetValue
HeapReAlloc
UnhandledExceptionFilter
GetEnvironmentStringsW
IsBadWritePtr
GetCurrentProcessId
HeapAlloc
GetACP
GetSystemInfo
IsValidCodePage
GetModuleHandleA
TlsSetValue
CreateSemaphoreA
DeleteCriticalSection
WriteFile
GetUserDefaultLCID
MultiByteToWideChar
GetLastError
LeaveCriticalSection
VirtualFree
FreeEnvironmentStringsW
HeapSize
EnumSystemLocalesA
CreateMailslotW
ExitProcess
GetTickCount
EnterCriticalSection
SetEnvironmentVariableA
HeapFree
GetStartupInfoA
GetModuleFileNameA
LCMapStringA
LoadLibraryA
QueryPerformanceCounter
GetOEMCP
VirtualAlloc
TryEnterCriticalSection
GetFileType
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetStdHandle
GetTimeFormatA
HeapCreate
InitializeCriticalSection
CompareStringW
TlsAlloc
GetLocaleInfoA
GetSystemTimeAsFileTime
GetStringTypeA
GetCurrentThread
MoveFileExW
GetStringTypeW
GetTimeZoneInformation
GetCommandLineA
WideCharToMultiByte
VirtualProtect
LCMapStringW
GetCPInfo
GetVersionExA
GetLocaleInfoW
FreeEnvironmentStringsA
SetHandleCount
GetDateFormatA
HeapDestroy
CompareStringA
InterlockedExchange

gdi32

SetDIBColorTable
DeviceCapabilitiesExW
GetCharABCWidthsW
GetDIBits
GdiSetBatchLimit
CreatePen
PtInRegion
SwapBuffers
Chord
FlattenPath
ChoosePixelFormat
GetMapMode
GetTextAlign
GetObjectType
EnumFontFamiliesA
PathToRegion
UnrealizeObject
Escape
PolyPolyline

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 389KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebc0ca79a6d14681760a279f3396eb1e

Headers

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 156KB - Virtual size: 155KB

.data Size: 389KB - Virtual size: 401KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 156KB - Virtual size: 155KB

.data
Size: 389KB - Virtual size: 401KB

.rsrc
Size: 16KB - Virtual size: 15KB