f941bea567136d990a2b61fbe291989dddf178ba1d4f52b67d07c92c849b83bf

General

Target

f941bea567136d990a2b61fbe291989dddf178ba1d4f52b67d07c92c849b83bf
Size

36KB
MD5

690cf43571d1fae88495672a83bb5fb0
SHA1

d7220abd32fca16d7b25c52cd18c882708b9c1ca
SHA256

f941bea567136d990a2b61fbe291989dddf178ba1d4f52b67d07c92c849b83bf
SHA512

38f9dc0783276203f2ca27d1de82075c640f399f516850e6e576a9e7cb41eab5390a5388cc066bd45ab267cedaf3f6d617f8ed3a1aa8ed6ab72eaf4eb36f8e24
SSDEEP

384:E7GLSzJAPtsymlHdxRyyNB9rFoM/5U7eUuMDruMOVqw8HEBtzyT:E7GLE6tsfyQBVFoM/5U7eUu8tLHELzyT

Score

N/A

Malware Config

Signatures

Files

f941bea567136d990a2b61fbe291989dddf178ba1d4f52b67d07c92c849b83bf
.exe windows x86

705cbe71b06353bac3360f8e798fc146

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FindFirstFileA
LoadLibraryExA
LoadLibraryA
CreateProcessA
WinExec
_lopen
CopyFileA
MoveFileExA
MoveFileA
OpenFile
CreateFileA
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
FindNextFileA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
WriteFile
LCMapStringA
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

FindExecutableA
ShellExecuteA
ShellExecuteExA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

705cbe71b06353bac3360f8e798fc146

Headers

File Characteristics

Imports

kernel32

comdlg32

shell32

Sections

.text Size: 12KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.edata Size: 12KB - Virtual size: 180KB

.text
Size: 12KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.edata
Size: 12KB - Virtual size: 180KB