c947ed7638452eeab8c844838943190966cb8b87865478270b93349fffbd96fd

General

Target

c947ed7638452eeab8c844838943190966cb8b87865478270b93349fffbd96fd
Size

120KB
MD5

68d22f5ec85a03384a012f24a2f87e90
SHA1

88bdc91e31573dce1fa2bf0519b3dc0206516fd2
SHA256

c947ed7638452eeab8c844838943190966cb8b87865478270b93349fffbd96fd
SHA512

301df4ee817bda2052ca45500f74d170690c980deb0d5d6650738184f9d00aaba2155b14ae7797f49e16458d36feddedb7802595f5a377ce3886fbb8288816dd
SSDEEP

1536:bm0tPNPCEtGumfsjZsybFZBNihdcmXVOX7q3bwMbBNxuK80fq38FAMq1FfTQtW7O:bm0yE7FljNiwmsGcMlNxuK80CCa1Ff

Score

N/A

Malware Config

Signatures

Files

c947ed7638452eeab8c844838943190966cb8b87865478270b93349fffbd96fd
.exe windows x86

09232e06319558137e0806328894f38e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
lstrlenA

user32

LoadIconA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

mfc42

ord860
ord1575
ord561
ord815
ord800
ord924
ord537
ord1146
ord1168

msvcrt

_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
_mbsrchr
__CxxFrameHandler
_snprintf

msvcp60

??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�X��A�
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09232e06319558137e0806328894f38e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

mfc42

msvcrt

msvcp60

Sections

.text Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 500B

.rsrc Size: 16KB - Virtual size: 12KB

�X��A� Size: 88KB - Virtual size: 88KB

.text
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 500B

.rsrc
Size: 16KB - Virtual size: 12KB

�X��A�
Size: 88KB - Virtual size: 88KB