b0a1bb6c4df80fee2f10a7c279d4ed950d07eb17bc9de28111bd18a1b0e00dbe

Sharing

Copy URL Twitter E-mail

General

Target

b0a1bb6c4df80fee2f10a7c279d4ed950d07eb17bc9de28111bd18a1b0e00dbe
Size

132KB
MD5

04f44020113c9af152b2a6d8474b3956
SHA1

907ce2d6dbc95e09085bdce5317b0bd4a9c9309c
SHA256

b0a1bb6c4df80fee2f10a7c279d4ed950d07eb17bc9de28111bd18a1b0e00dbe
SHA512

145cf38307bb745d7731bdd8d5bd58e3efd26846aa9430cb3dd6c5509eac9ced46f87481441c191b16e8897f4c48d15013af0c3588ca1b0954a79cbd0a4fcf32
SSDEEP

1536:L/3AzEEdMz2Ro8r4xeWLiiHaUMgRVAO3i6uOb7SLERGT/8bL2e0Wca64:b34Ej6oC4tXj9y63HSDbrMca64

Score

N/A

Malware Config

Signatures

Files

b0a1bb6c4df80fee2f10a7c279d4ed950d07eb17bc9de28111bd18a1b0e00dbe
.exe windows x86

893497ece073787af5ed7206a866d8a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

kernel32

SetThreadPriority
CloseHandle
SetEvent
CreateSemaphoreA
DeleteFileW
GetTickCount
PulseEvent
WriteFile
GetLastError
TerminateThread
Sleep
VirtualAlloc
GetProcAddress
GetModuleHandleA
SuspendThread
HeapSize
SetStdHandle
RtlUnwind
LCMapStringW
LCMapStringA
WaitForSingleObject
DeleteFileA
RaiseException
FlushFileBuffers
ReadFile
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
LoadLibraryA
SetFilePointer
GetACP
GetLocaleInfoA

user32

LoadImageA
LoadIconW
LoadCursorW
LoadBitmapW

gdi32

CreateCompatibleBitmap

ole32

CoCreateInstance

oleaut32

VariantInit

winmm

joyGetThreshold
mciSendCommandA

Exports

Exports

?SETCONFIG@@YAXXZ

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

893497ece073787af5ed7206a866d8a1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

winmm

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 38KB

.code Size: 4KB - Virtual size: 1KB

.rdata Size: 56KB - Virtual size: 53KB

.data Size: 4KB - Virtual size: 8KB

.tls Size: 4KB - Virtual size: 100B

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 40KB - Virtual size: 38KB

.code
Size: 4KB - Virtual size: 1KB

.rdata
Size: 56KB - Virtual size: 53KB

.data
Size: 4KB - Virtual size: 8KB

.tls
Size: 4KB - Virtual size: 100B

.rsrc
Size: 20KB - Virtual size: 18KB