d2f1c51bc8c8c23d8cabb3dc271adf059effba9efed4c8aba65a9c927287e53b

General

Target

d2f1c51bc8c8c23d8cabb3dc271adf059effba9efed4c8aba65a9c927287e53b
Size

237KB
MD5

711e5b4cdfbee63513c9658f023a4110
SHA1

74e6b1d0a99c63ed00a3751f4605671e02d4388d
SHA256

d2f1c51bc8c8c23d8cabb3dc271adf059effba9efed4c8aba65a9c927287e53b
SHA512

ddd8bbfe1c6054082a68376ea3cdc23901b42bad871e63bc0ceeb18f39b45f9796855bfb122b7eebba4e16cf829c9cf4f985e5752f23e257d18662bf79495d14
SSDEEP

6144:AdfeKhYoERBhBkwM4zLDWj4w8AZRhl+OtkMMXnDuCq/k2JnHoLBdexcZ5fu+2gL7:snHoNdexcZ5ftLrRleMw7up26oh

Score

N/A

Malware Config

Signatures

Files

d2f1c51bc8c8c23d8cabb3dc271adf059effba9efed4c8aba65a9c927287e53b
.exe windows x86

34b5103d3c54a08a2bfa9e5c8e20e0ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindAtomA
GetAtomNameA
GetExitCodeProcess
GetFullPathNameA
GetSystemTimeAsFileTime
GetVersionExA
SetHandleInformation
SetUnhandledExceptionFilter
WaitForSingleObject

msvcrt

_close
_execvp
_fdopen
_getpid
_open
_putenv
_read
_stat
_strdup
_unlink
__getmainargs
__p__environ
__p__fmode
__set_app_type
_access
_assert
_cexit
_close
_errno
_get_osfhandle
_iob
_onexit
_open
_pipe
_read
_setmode
_stricmp
abort
atexit
calloc
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
freopen
fseek
ftell
getenv
isalnum
isalpha
iscntrl
isdigit
islower
isprint
ispunct
isspace
isupper
isxdigit
malloc
memcmp
memcpy
memmove
memset
printf
putchar
qsort
raise
realloc
remove
signal
sprintf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strstr
tolower
vfprintf

user32

CharLowerBuffA

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rhvrukk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

34b5103d3c54a08a2bfa9e5c8e20e0ad

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 115KB - Virtual size: 114KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 90KB - Virtual size: 90KB

.bss Size: - Virtual size: 5KB

.idata Size: 29KB - Virtual size: 30KB

rhvrukk Size: - Virtual size: 4KB

.text
Size: 115KB - Virtual size: 114KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 90KB - Virtual size: 90KB

.bss
Size: - Virtual size: 5KB

.idata
Size: 29KB - Virtual size: 30KB

rhvrukk
Size: - Virtual size: 4KB