c190f7689579b774a2db5ed35fd02f375985134811239a0c3c75cc0217a7ab02

General

Target

c190f7689579b774a2db5ed35fd02f375985134811239a0c3c75cc0217a7ab02
Size

38KB
MD5

f147aad4f9e460e55916e87722cbc595
SHA1

2a6b4d7bda2ac8479aeab7a3beb6779462b9166f
SHA256

c190f7689579b774a2db5ed35fd02f375985134811239a0c3c75cc0217a7ab02
SHA512

1edf0badcced13865d1a9f3415cd9c4bdc601f38ce3e6f5d24070f590d5b3f2defbee07efc92946dfee0aef0ff1e61b8b498140d0599610707c3482e0f389a52
SSDEEP

768:oAbOmVXOZCj0r2ubCzM57DTHSmDSyGp04rGJ3UZp6Zee:bbO4XkCj0rmM57DTRi04KJepNe

Score

N/A

Malware Config

Signatures

Files

c190f7689579b774a2db5ed35fd02f375985134811239a0c3c75cc0217a7ab02
.exe windows x86

7944097ac66d467cd2ffc968e3944cee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscpy
_stricmp
_iob
rand
atoi
??3@YAXPAX@Z
__getmainargs
__mb_cur_max

kernel32

InterlockedExchange
GetLocalTime
GetStdHandle
InterlockedDecrement
GetThreadLocale
GetACP
GetProcessHeap
GetCommandLineW
InterlockedIncrement
GetSystemInfo
UnmapViewOfFile
GetProcAddress
SetFilePointer

ulib

??0PATH@@QAE@XZ
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
??0FLAG_ARGUMENT@@QAE@XZ
?Initialize@FSN_FILTER@@QAEEXZ
??0LONG_ARGUMENT@@QAE@XZ
??1PROGRAM@@UAE@XZ
?Initialize@PATH@@QAEEPBV1@E@Z
??1STRING_ARGUMENT@@UAE@XZ
?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z

ntdll

RtlInitializeBitMap
RtlUnicodeStringToAnsiString
NtQueryInformationFile
RtlAnsiStringToUnicodeString
NtWaitForMultipleObjects
_wcsicmp
NtTerminateThread
RtlUnwind
NtOpenProcessToken
RtlSystemTimeToLocalTime
RtlSetBits
RtlUnicodeToMultiByteN
NtSetEvent
NtWriteFile
isprint

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7944097ac66d467cd2ffc968e3944cee

Headers

File Characteristics

Imports

msvcrt

kernel32

ulib

ntdll

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 123KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 123KB

.reloc
Size: 4KB - Virtual size: 3KB