1fc837fdb36cea24ffbaa6d7555d664df402e8458a9b16b22292ea5a8ea9a95c

General

Target

1fc837fdb36cea24ffbaa6d7555d664df402e8458a9b16b22292ea5a8ea9a95c
Size

102KB
MD5

6419612f692ab595fc34aece8ef150b4
SHA1

989cc5c6ff3b57f4cee671e930f83e8281104d76
SHA256

1fc837fdb36cea24ffbaa6d7555d664df402e8458a9b16b22292ea5a8ea9a95c
SHA512

852f9181c5953020597cb622c801b0295d2bb40bee8410ebadad41f1bd237fa0d2ec17fca3957b5cdcc241f2040fbe1867b20519f9b67bc989f20288cf870bba
SSDEEP

1536:yHY16f9/ucLibD8fmk6Pc89trzgxnA6JyX6L+iF8/bbx6H4OEytxeHbv0iVU/q:W/ucLiHCB8zPSA6AQ1sxzOE8xeD0gN

Score

N/A

Malware Config

Signatures

Files

1fc837fdb36cea24ffbaa6d7555d664df402e8458a9b16b22292ea5a8ea9a95c
.exe windows x86

beab79632baf53f2c6207e3f2e3f0484

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
RaiseException
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryW
GetCurrentProcess
GetModuleFileNameW
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
HeapSize
TerminateProcess
IsBadWritePtr
ExitProcess
HeapFree
RtlUnwind
GetModuleHandleA
GetStartupInfoW
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc

user32

GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassExW
DefWindowProcW
PostMessageW
DestroyWindow
BeginPaint
EndPaint
PostQuitMessage
SetTimer
CreateWindowExW
ShowWindow
UpdateWindow

oleaut32

SysFreeString
SysAllocString

shlwapi

PathCombineW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

beab79632baf53f2c6207e3f2e3f0484

Headers

File Characteristics

Imports

kernel32

user32

oleaut32

shlwapi

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 72KB - Virtual size: 76KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 72KB - Virtual size: 76KB