c2598b8d3bcfed2613a130006659a7aad3514cc3c0abd3834e27560232ce867f

General

Target

c2598b8d3bcfed2613a130006659a7aad3514cc3c0abd3834e27560232ce867f
Size

464KB
MD5

6bffa9f0ac8b4e0fd0a49e1e36fbffa0
SHA1

849edffc8ed427847e21a57c709cb1bcc52447b4
SHA256

c2598b8d3bcfed2613a130006659a7aad3514cc3c0abd3834e27560232ce867f
SHA512

4c05f64ec1b3cedcfd9e98e3e256a612b17195a2beefa70a7f21480c6307cb08e3799ebae4e8668e93202b6658275323cdf12da7b4e0c9ed0cfafd9167eeab78
SSDEEP

12288:iZ7ElP0pGufmL5MZZWyan1sVsz/YM5m+J6t5tzp:WEloLmLOLWtn1r5hEtDF

Score

N/A

Malware Config

Signatures

Files

c2598b8d3bcfed2613a130006659a7aad3514cc3c0abd3834e27560232ce867f
.exe windows x86

41c68f5ed9d15da3fb854fca698f888d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SetEvent
Sleep
GetProcAddress
GetLastError
VirtualAlloc
GetTickCount
ResetEvent
CloseHandle
FlushFileBuffers
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
LCMapStringA
LCMapStringW
SetStdHandle

user32

ShowWindow
LoadStringA
SetFocus
FindWindowA
GetActiveWindow
LoadIconA

winmm

joyGetPosEx
mixerClose
joyGetDevCapsA
joySetThreshold

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 610KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41c68f5ed9d15da3fb854fca698f888d

Headers

File Characteristics

Imports

kernel32

user32

winmm

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 13KB

.rsrc Size: 400KB - Virtual size: 610KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 13KB

.rsrc
Size: 400KB - Virtual size: 610KB