bcb0a543f5fa069d38149ce762eef997a88cccd426d97453a682a7c4c7c2f5df

General

Target

bcb0a543f5fa069d38149ce762eef997a88cccd426d97453a682a7c4c7c2f5df
Size

227KB
MD5

4a033d0dc56dd7990aa0d25477104460
SHA1

7dbc34fd714e9720a708128fc765e164f563839e
SHA256

bcb0a543f5fa069d38149ce762eef997a88cccd426d97453a682a7c4c7c2f5df
SHA512

0febb7920d9b23ba3c93aac786171ac6f0966ce3b20e1b60827f541af86e1df1d0be3184801ece73b41a52ebde773eb72a88a714ee18a7d98c6f3e4ba6f87969
SSDEEP

6144:EXz+Dwo9liyFS4b7lFMimDPmLVZjmt4V8hhqfH:mmGylb7tmDug4Va

Score

N/A

Malware Config

Signatures

Files

bcb0a543f5fa069d38149ce762eef997a88cccd426d97453a682a7c4c7c2f5df
.exe windows x86

8568e7562fdadc2b5da981a280105b03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
VirtualAlloc
GetFileAttributesExA
HeapReAlloc
lstrcpyA
SetUnhandledExceptionFilter
UnlockFile
GetModuleHandleA
CreateFileA
GetCurrentThreadId
GetVersion
GetComputerNameA
GetTempPathA
GetCurrentProcess
GlobalLock
SleepEx
GetProcAddress
DeviceIoControl
FormatMessageA
LoadLibraryA
Sleep
GetCurrentProcessId
GetVolumeInformationA
FindNextChangeNotification
WriteFile
InitializeCriticalSectionAndSpinCount
SetEvent
GetEnvironmentVariableA
WriteFileEx
VirtualQueryEx
GetStartupInfoA
GetCommandLineA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8568e7562fdadc2b5da981a280105b03

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 210KB - Virtual size: 210KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 9KB - Virtual size: 18KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 210KB - Virtual size: 210KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 9KB - Virtual size: 18KB

.rsrc
Size: 3KB - Virtual size: 3KB