ca9c01ee5ad5248754063c2d7b0f6641d0d7fe9a578b68d4c010292cdde0ad7e

General

Target

ca9c01ee5ad5248754063c2d7b0f6641d0d7fe9a578b68d4c010292cdde0ad7e
Size

1023KB
MD5

e49a09b338b32b4c5e150bf793895c08
SHA1

ea449c077095e8f4906993fc14b13e0fa6987134
SHA256

ca9c01ee5ad5248754063c2d7b0f6641d0d7fe9a578b68d4c010292cdde0ad7e
SHA512

e72a82297201584ee7c5d123b2a52bc4e22f577da2b1fe4cee355b6fc635ffe3c3c28516401057ed46f53656db3c43b5b2d332154b081c025433b7cbf84dcbda
SSDEEP

24576:ZEyaAdKD/02O6kMzZHVEIBd2X2mjhEC95rtA:arRPdtHVlBQX5jd95ZA

Score

N/A

Malware Config

Signatures

Files

ca9c01ee5ad5248754063c2d7b0f6641d0d7fe9a578b68d4c010292cdde0ad7e
.exe windows x86

99eec95f75791f096be57a8240b1d30d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
Sleep
GetVersionExA
FreeLibrary
LocalFree
LocalAlloc
GetCommandLineA
GetLastError
GetModuleHandleA
GlobalAlloc
GetVersion
GetTickCount
lstrcatA

msvcrt

memmove
_initterm
__p__commode
_exit
wcstoul
wcslen
_acmdln
__set_app_type
_adjust_fdiv
__p__fmode
_c_exit
toupper
_except_handler3
__getmainargs
exit
_XcptFilter
rand
__setusermatherr
__CxxFrameHandler
wcschr

user32

BeginPaint
GetMessageA
GetFocus
DispatchMessageA
EndPaint
PostQuitMessage
LoadIconA

gdi32

ExtTextOutA
SetPixel
MoveToEx
SetBkMode
SetROP2
CreateCompatibleDC
SelectObject
GetStockObject
GetDeviceCaps
CreateFontIndirectA
GetBkColor
LineTo
GetObjectA
DeleteObject
CreateSolidBrush
GetTextColor

Sections

.text
Size: 1024B - Virtual size: 957B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 509B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1015KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99eec95f75791f096be57a8240b1d30d

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

Sections

.text Size: 1024B - Virtual size: 957B

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 509B

.rsrc Size: 1015KB - Virtual size: 2.8MB

.text
Size: 1024B - Virtual size: 957B

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 509B

.rsrc
Size: 1015KB - Virtual size: 2.8MB