54272e283d1d9daf4ba0f09dbac1f86b34a0fe920a4d9b5284ef8eb70b9137a0

General

Target

54272e283d1d9daf4ba0f09dbac1f86b34a0fe920a4d9b5284ef8eb70b9137a0
Size

244KB
MD5

11cce4441e7f2f31deb51f5584678d20
SHA1

da80049b086a3d03880317e7158168fa64e2b63a
SHA256

54272e283d1d9daf4ba0f09dbac1f86b34a0fe920a4d9b5284ef8eb70b9137a0
SHA512

a90f6852b31d571b16282734b12a00161c8ac97dfa0a581ede0109d28792d1877d1e94c434e4181fca9c1852807256311fa1de49887f07e41a60fa871b9b7783
SSDEEP

6144:mJsdoEicsOi/Cg87W/Wm/0JsMDcPT+5WGFJaZOFpEZMmQ8y:uzJH/MW/Wm7MDgTuaZxZMma

Score

N/A

Malware Config

Signatures

Files

54272e283d1d9daf4ba0f09dbac1f86b34a0fe920a4d9b5284ef8eb70b9137a0
.exe windows x86

8cd50b09383ec7fb6ca0240bed734e69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
printf
free
__getmainargs
_cexit
_exit
_XcptFilter
exit
_amsg_exit

kernel32

InterlockedCompareExchange
GetProcAddress
SetConsoleCtrlHandler
OpenMutexA
WaitForSingleObject
FreeLibrary
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetLastError
Sleep
InterlockedExchange

vmwarebase

ord981
ord7
ord1010
ord4
ord1030
ord1051
ord779
ord2
ord1027

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

]�
Size: 235KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8cd50b09383ec7fb6ca0240bed734e69

Headers

File Characteristics

Imports

msvcr80

kernel32

vmwarebase

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 932B

.rsrc Size: 2KB - Virtual size: 1KB

]� Size: 235KB - Virtual size: 236KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 932B

.rsrc
Size: 2KB - Virtual size: 1KB

]�
Size: 235KB - Virtual size: 236KB