eca85a9f4c0e7e058cbf081d039fea472cb5bfce427912ccd69ee796e40e3460

General

Target

eca85a9f4c0e7e058cbf081d039fea472cb5bfce427912ccd69ee796e40e3460
Size

144KB
MD5

6b3a7c854e08e16c90168580c3aaad90
SHA1

864da0c1714330034c9bd39c26f47f0d51011ee9
SHA256

eca85a9f4c0e7e058cbf081d039fea472cb5bfce427912ccd69ee796e40e3460
SHA512

54453cb88cd618a65c97b602c5481ebf1f88bd08094845d7dcc74daf42c83395d50ea4ad5be7be7c6ba1b0c8948ecb112a277e4fdf70de44aeae18efb6ff025f
SSDEEP

3072:lAr7XvVgyG22sUHsWvDvTWMlxfFj9WnIfypmm5DygXQqLZQ5X0V92olI:l87XdZG2rUH5v7Xl/j4oypxtOl0VrS

Score

N/A

Malware Config

Signatures

Files

eca85a9f4c0e7e058cbf081d039fea472cb5bfce427912ccd69ee796e40e3460
.exe windows x86

e9e3923fa6b5c81cfcfc4413e09333bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
memcpy
fopen
fseek
fclose
memmove
_CIsqrt
_CIlog
floor
ceil
_CIexp
fabs
malloc
free
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
CloseHandle
InitializeCriticalSection
ReadFile
GetLastError
LoadLibraryA
GetProcAddress
HeapReAlloc
TlsAlloc
GetVersionExA
GetLogicalDriveStringsA

user32

DestroyIcon
FillRect

gdi32

GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject

wsock32

closesocket
WSACleanup
WSAStartup

winmm

mciSendCommandA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ta
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

src
Size: 123KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e9e3923fa6b5c81cfcfc4413e09333bb

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

wsock32

winmm

Sections

.code Size: 8KB - Virtual size: 7KB

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 512B - Virtual size: 216B

.ta Size: 2KB - Virtual size: 3KB

src Size: 123KB - Virtual size: 147KB

.code
Size: 8KB - Virtual size: 7KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 512B - Virtual size: 216B

.ta
Size: 2KB - Virtual size: 3KB

src
Size: 123KB - Virtual size: 147KB