f9156a27462500865226e94d25efe233429bf5433f1191baec0667b09f0f19dc

General

Target

f9156a27462500865226e94d25efe233429bf5433f1191baec0667b09f0f19dc
Size

52KB
MD5

6ffbf0a537baa88e759c99f003bd5f43
SHA1

26fe6e1182b0dc90496da3840edf6729b46873d1
SHA256

f9156a27462500865226e94d25efe233429bf5433f1191baec0667b09f0f19dc
SHA512

57eec16ce8a59fd5e509340df4490c83319586bb4e359b7cb9e7398d796ef921f91585b69b3a16d9bf0d977130bfbf01739fa97bb669b9595c7449ed17537162
SSDEEP

768:sHABb0+7ttVxzsMVl1SWPcWGusTKLtlXQu:TblRtD0WPcpilXQu

Score

N/A

Malware Config

Signatures

Files

f9156a27462500865226e94d25efe233429bf5433f1191baec0667b09f0f19dc
.exe windows x86

e4e54915bcf42affed95792fc1491e15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
GetSystemDirectoryA
TerminateProcess
CreateProcessA
Sleep
GetCurrentProcessId
ExitProcess
CloseHandle
LoadLibraryA
GetProcAddress
OpenProcess
FreeLibrary
LCMapStringA
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
CreateFileA
FlushFileBuffers
SetStdHandle
HeapAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
GetLastError
WriteFile
SetUnhandledExceptionFilter
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
LCMapStringW

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA

psapi

GetModuleFileNameExA

ws2_32

inet_addr

shlwapi

PathFindFileNameA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4e54915bcf42affed95792fc1491e15

Headers

File Characteristics

Imports

kernel32

advapi32

psapi

ws2_32

shlwapi

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 888B

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 888B