fa19f1b3c4b080fd4dee79251725210649299e701b3609ee1f7a6d95c4d0b3b4

General

Target

fa19f1b3c4b080fd4dee79251725210649299e701b3609ee1f7a6d95c4d0b3b4
Size

376KB
MD5

6f5dc1e49f686082fbe9a324215724ed
SHA1

e0bef975cb1e5a847c9ae6a59a3cf387a539f60d
SHA256

fa19f1b3c4b080fd4dee79251725210649299e701b3609ee1f7a6d95c4d0b3b4
SHA512

85bd6ec3aa3a4a94ae49d2eaa2d5337f99fd28c64a9572cea307b38348c95ac45f70608559e6cace5922b193fc19826458c0e467bde36bf07d99920385b61c43
SSDEEP

6144:g66ufAOfuZ9r+3wC2ccoSlRQTYojJeEC11xKxOLpbZEV0sgu3/V+w97X:g5uf7fBwCx8TvcCQxieV1gU7X

Score

N/A

Malware Config

Signatures

Files

fa19f1b3c4b080fd4dee79251725210649299e701b3609ee1f7a6d95c4d0b3b4
.exe windows x86

0de7dce8b9a6351e266d9315595bf922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetEvent
Sleep
GetModuleHandleA
VirtualAlloc
GetProcAddress
VirtualFree
GetProcessHeap
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
GetStringTypeW

user32

PostMessageA

msvfw32

DrawDibClose

winmm

mciSendCommandA
mciSendStringA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rlx
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0de7dce8b9a6351e266d9315595bf922

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

winmm

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 328KB - Virtual size: 327KB

.rsrc Size: 16KB - Virtual size: 404KB

.rlx Size: 4KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 328KB - Virtual size: 327KB

.rsrc
Size: 16KB - Virtual size: 404KB

.rlx
Size: 4KB - Virtual size: 1KB