c6c9c811b757018e91cea86f92c4c6a053f3037b218ec02304615b351f15fe0a

General

Target

c6c9c811b757018e91cea86f92c4c6a053f3037b218ec02304615b351f15fe0a
Size

567KB
MD5

44a1607a132e19dcc3539e540a44195a
SHA1

19b2795539728e53542ff9cc0c5de26e46fbb372
SHA256

c6c9c811b757018e91cea86f92c4c6a053f3037b218ec02304615b351f15fe0a
SHA512

37d5aaf22dd04400a6cb83e6b6f44cf09670f79ee8d01fd64d6bed7c8af5b5054d73cfc6a9438d49480a52e54cb6b50fc5b9750b4edae0869e5c96ce48ee7a0d
SSDEEP

12288:o2r3g8q6hwU0ysoeYT3pYofR3Yq9aGQMb6DFAqCaLuAWjA:fNrhIBo7OofR3Yq9nQhAqCdAWj

Score

N/A

Malware Config

Signatures

Files

c6c9c811b757018e91cea86f92c4c6a053f3037b218ec02304615b351f15fe0a
.exe windows x86

00124295d42e9aecf2fe6526996bfa3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
TlsFree
TerminateProcess
WriteFile
GetProcAddress
DeleteFileA
Sleep
GetEnvironmentStrings
LoadResource
CloseHandle
DeleteCriticalSection
InterlockedExchange
UnhandledExceptionFilter
WriteConsoleW
ReadFile
InterlockedIncrement
WaitForSingleObject
HeapReAlloc
HeapAlloc
VirtualQuery
GetStdHandle
GetModuleFileNameA
GetFileAttributesW
GetProcessHeap
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetCurrentProcessId
GetACP
LoadLibraryW
FreeLibrary
GetModuleHandleA
CreateProcessA
TlsGetValue
GetCurrentThreadId
SetFilePointer
GetVersion
CreateFileW
GetStringTypeW
LCMapStringA
GetModuleFileNameW
GetLastError
GetDriveTypeA
ExitProcess
GetStartupInfoA

user32

GetDesktopWindow
MessageBoxA
DispatchMessageA
GetFocus
GetDC
GetWindowLongA
ReleaseDC
LoadStringA
SetWindowPos
SetTimer
GetWindowRect
ScreenToClient
DefWindowProcA
IsWindow
SetWindowTextA
SetCursor

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_strcmpi
_exit

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 502KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00124295d42e9aecf2fe6526996bfa3c

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 502KB - Virtual size: 502KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 502KB - Virtual size: 502KB

.rsrc
Size: 3KB - Virtual size: 2KB