bc8321331f4e3e66db476b3b0e5c793ea0fed5494791f7775fb858b0684a9e93

General

Target

bc8321331f4e3e66db476b3b0e5c793ea0fed5494791f7775fb858b0684a9e93
Size

124KB
MD5

519eae57cb280a65971faff5e87a9cd0
SHA1

5c1cd8b926dfe492e20a79ea2db2e2237716561d
SHA256

bc8321331f4e3e66db476b3b0e5c793ea0fed5494791f7775fb858b0684a9e93
SHA512

fac872dcde307cfbbcb587b38205d828a60e8a62cd0820236149b56e4bc3647e6f798d4eecf08440c94bb35e7642315708adc341e693c794d2a575bb97d3aef8
SSDEEP

1536:O+B6iJBGBvkIz1jstgcdfJkthpS2wrmvczANO6kBC/bLcDNb7x6zQdGEgJdzqQ:n6hWtgWfJkw2wr63NrbjLcDNBdNg3uQ

Score

N/A

Malware Config

Signatures

Files

bc8321331f4e3e66db476b3b0e5c793ea0fed5494791f7775fb858b0684a9e93
.exe windows x86

49527b61e465b1f71e05c6463bfd559a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

kernel32

GetLastError
GetProcAddress
ReadFileEx
SleepEx
GetLocalTime
GetFileAttributesExA
GetTickCount
ExitProcess
GlobalAlloc
GetModuleFileNameA
CreateFileA
LoadLibraryA
GetEnvironmentStrings
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
WriteFile
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

gdi32

BitBlt
CloseFigure

shell32

DragQueryPoint

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49527b61e465b1f71e05c6463bfd559a

Headers

File Characteristics

Imports

msimg32

kernel32

gdi32

shell32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 80KB - Virtual size: 82KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 80KB - Virtual size: 82KB

.rsrc
Size: 4KB - Virtual size: 1KB