63b0e3f8d47d7b33aee4785a97b9557b7941ed2b5f2f949642637680a4c45183

General

Target

63b0e3f8d47d7b33aee4785a97b9557b7941ed2b5f2f949642637680a4c45183
Size

244KB
MD5

66792d159194541756dfb336d1657a40
SHA1

4208353ad157701fbad0f1f51747c45a05134e78
SHA256

63b0e3f8d47d7b33aee4785a97b9557b7941ed2b5f2f949642637680a4c45183
SHA512

3adca2061645f2e6d2d88306610e8a533030ec6368c3e2c7df08a9b70c956421b124de1acfb70f8ac9e1081a0efcdcad85e976cc3aad026854df5377e5534343
SSDEEP

3072:o4LlLlu6pSHz5zTSvbDX9EJgz8TYkZIPqX4hwoBORS5EfpihrU5tcGbJNWm:3BYQSHVT+DrzrMIiBoBKScuU5jd

Score

N/A

Malware Config

Signatures

Files

63b0e3f8d47d7b33aee4785a97b9557b7941ed2b5f2f949642637680a4c45183
.exe windows x86

963b9698cdf27b46994f9faf12ae2735

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
InterlockedDecrement
GetModuleHandleA
VirtualAlloc
GetSystemTime
ExitProcess
GetLastError
VirtualFree
GetProcAddress
LoadLibraryW
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
DeleteFileA
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemInfo

user32

EnableWindow
DestroyWindow

winscard

SCardGetCardTypeProviderNameA

avifil32

AVISaveA

msacm32

acmMetrics
acmFormatEnumW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ep
Size: 4KB - Virtual size: 791B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

963b9698cdf27b46994f9faf12ae2735

Headers

File Characteristics

Imports

kernel32

user32

winscard

avifil32

msacm32

Sections

.text Size: 16KB - Virtual size: 15KB

.ep Size: 4KB - Virtual size: 791B

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 128KB - Virtual size: 125KB

.rsrc Size: 84KB - Virtual size: 153KB

.text
Size: 16KB - Virtual size: 15KB

.ep
Size: 4KB - Virtual size: 791B

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 128KB - Virtual size: 125KB

.rsrc
Size: 84KB - Virtual size: 153KB