fb89f7a1b3495b272ef2ba2d88c8806be201042cbd6e8e30d4764500c8160423

General

Target

fb89f7a1b3495b272ef2ba2d88c8806be201042cbd6e8e30d4764500c8160423
Size

248KB
MD5

6447321412e3e4b901ca62b1cac6e8a0
SHA1

987b74993407f06e03919320c5e86c0885dcc1fb
SHA256

fb89f7a1b3495b272ef2ba2d88c8806be201042cbd6e8e30d4764500c8160423
SHA512

49cf980322101a7e2487b6e2766d87b28826b5a03d5ffd7c8b317927413a0bce2b4dfbd27ea34b07ad3fdf7ebc604e07f41f32cfcc532082f6d2d6a1b515bf05
SSDEEP

6144:LBYHWEG3+O81DSm/ChzDzpNUZUiw3oGOLiM5PjQCw2NR/TN82B:NYHWEG3+O81DzuDzk/FZ8s

Score

N/A

Malware Config

Signatures

Files

fb89f7a1b3495b272ef2ba2d88c8806be201042cbd6e8e30d4764500c8160423
.exe windows x86

a47bdc94adcbcb763a31f0a466224b1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
FindNextFileA
SetStdHandle
GetLocaleInfoW
GetVersionExA
WideCharToMultiByte
GetLocaleInfoA
MultiByteToWideChar
ExitProcess
RtlUnwind
GetModuleHandleA
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCPInfo
HeapReAlloc
LCMapStringA
GetLastError
LCMapStringW
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
CloseHandle
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetTimeZoneInformation
LoadLibraryA
GetACP
GetOEMCP
SetEnvironmentVariableA

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
SetNamedSecurityInfoA
RegOpenKeyA

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a47bdc94adcbcb763a31f0a466224b1a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 128KB - Virtual size: 127KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 92KB - Virtual size: 92KB

.text
Size: 128KB - Virtual size: 127KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 92KB - Virtual size: 92KB