6ff67772f3f81106fa8eef6fb69c2c109c957d069ec39e38e372fb4d5c902e7a

Sharing

Copy URL

Twitter E-mail

General

Target

6ff67772f3f81106fa8eef6fb69c2c109c957d069ec39e38e372fb4d5c902e7a
Size

412KB
MD5

6077804c38271dcd31d3e857bd0a7b70
SHA1

99f17b252d019e17322deee640bc855ada43e2c1
SHA256

6ff67772f3f81106fa8eef6fb69c2c109c957d069ec39e38e372fb4d5c902e7a
SHA512

b17a61a2a656c1831d4934411b346523e1ec132797eaeacabfd2877c5c81557f27ad47ad14ca08a91f1d2b6bf9408bceade4249dec5d2d9525e944c8ae42d3fe
SSDEEP

6144:VH8dV6xtfiTOooA3GotrM/fR6+FdF2ZwvnpW551a8efAhnobmFpV2xV2OyauSc:Vc3IeOooA3uUgAwvn2k3AhjFbRo

Score

N/A

Malware Config

Signatures

Files

6ff67772f3f81106fa8eef6fb69c2c109c957d069ec39e38e372fb4d5c902e7a
.exe windows x86

e90e1d2f9c3fc802467854c9c22bdee2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetLastError
CloseHandle
SetComputerNameW
GetLocalTime
Sleep
GetSystemTime
GetFileSize
lstrcpyA
GlobalAlloc
GetModuleHandleA
VirtualAlloc
FindResourceA
GlobalFree
WriteFile
GetStdHandle
GetTickCount
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
VirtualProtect
GetProcAddress
VirtualQuery
SetLastError
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStringTypeW
GetVersion
SuspendThread
VirtualFree
CreateThread
CreateDirectoryA
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc

user32

SetSysColors
GetDesktopWindow
IsWindowVisible
LoadCursorA

gdi32

SelectObject
CreateBitmapIndirect

avifil32

AVIBuildFilterA

ws2_32

WSAAsyncGetProtoByName

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 351KB - Virtual size: 782KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rlc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e90e1d2f9c3fc802467854c9c22bdee2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

avifil32

ws2_32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 351KB - Virtual size: 782KB

.rlc Size: 1024B - Virtual size: 16KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 351KB - Virtual size: 782KB

.rlc
Size: 1024B - Virtual size: 16KB