2b8d057b4b3b5b7478cc2a97276de71d78dce6d46b74e51941595cc7d2eb300e

General

Target

2b8d057b4b3b5b7478cc2a97276de71d78dce6d46b74e51941595cc7d2eb300e
Size

3.3MB
MD5

6d6c2734c317246fd22f358d3a6da512
SHA1

a5e7694e11f808a6afe75a59b0404be49852e7ce
SHA256

2b8d057b4b3b5b7478cc2a97276de71d78dce6d46b74e51941595cc7d2eb300e
SHA512

31aab87c42535cf08854509a97e9de75c91ae47cdfa8e10a7be5360705637f4d4c171fb3f4caf58ce56474a2342b5cbde5fda9985d6154a0a247d6dd1e95421c
SSDEEP

49152:+jNFS7nqP8n9Og3TUt0pfHGoq1s+zbGAAmo/H2QArhJ0d2egBMZRb2HM48hTI+Cw:269HpfmoCuxJ2TWgPHy/nm3IM8u4+ZBO

Score

N/A

Malware Config

Signatures

Files

2b8d057b4b3b5b7478cc2a97276de71d78dce6d46b74e51941595cc7d2eb300e
.exe windows x86

a6c91c20682b4fa4e504ee6f17718956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetWindowsDirectoryA
GetTempPathA
GetSystemDirectoryA
GetModuleFileNameA
DeleteFileA
CloseHandle
MoveFileExA
GetTempFileNameA
Sleep
GetCurrentThreadId
CreateFileA
GetTickCount
SetFileAttributesA
WriteFile
SetThreadPriority
CreateThread
SetCurrentDirectoryA
CreateDirectoryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetStdHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile

user32

GetInputState
GetMessageA
PostThreadMessageA

shell32

ShellExecuteA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
HttpQueryInfoA
InternetOpenUrlA

winmm

timeGetTime

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6c91c20682b4fa4e504ee6f17718956

Headers

File Characteristics

Imports

kernel32

user32

shell32

wininet

winmm

Sections

.text Size: 45KB - Virtual size: 45KB

.rawdat Size: 3.3MB - Virtual size: 3.3MB

.rsrc Size: 3KB - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 45KB

.rawdat
Size: 3.3MB - Virtual size: 3.3MB

.rsrc
Size: 3KB - Virtual size: 4KB