5ba10b1a21e25cb20dd10ff4602cd5ff275b05bc132bf16dadf085fa76eec4ba

Sharing

Copy URL Twitter E-mail

General

Target

5ba10b1a21e25cb20dd10ff4602cd5ff275b05bc132bf16dadf085fa76eec4ba
Size

164KB
MD5

61b4d17e7e1536e28ea0acb481637b41
SHA1

51023097355cd34bd48d91d489991fd6d5c995b3
SHA256

5ba10b1a21e25cb20dd10ff4602cd5ff275b05bc132bf16dadf085fa76eec4ba
SHA512

4a6b004f296477ead3de138e60fc81727adab4d1dee1129b4cc4352f8ffe0b7e3cd07df542d2f202faa341a38312e2e1a4784d2f758c1b69d3178a9e24e19378
SSDEEP

3072:BMCLHJc9JpJgN27sibcwoiht4LSqAIK/cWoR+c7Nh/:BMCSps2qwoiIgIeopN

Score

N/A

Malware Config

Signatures

Files

5ba10b1a21e25cb20dd10ff4602cd5ff275b05bc132bf16dadf085fa76eec4ba
.exe windows x86

069fee1371bc905159e5575dda7af26e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
FormatMessageA
lstrcpynA
ExpandEnvironmentStringsA
MapViewOfFile
CreateFileMappingA
CreateSemaphoreA
LocalFree
GetModuleFileNameA
GetCurrentProcessId
InterlockedIncrement
GetVersionExA
GetTickCount
CreateProcessA
GetDateFormatA
GetTimeFormatA
GetLocalTime
WaitForSingleObject
GetLastError
ReleaseSemaphore
ReleaseMutex
UnmapViewOfFile
CloseHandle
GetCPInfo
TerminateProcess
GetStringTypeW
GetCurrentProcess
LCMapStringW
LCMapStringA
GetStringTypeA
SetFilePointer
WriteFile
MultiByteToWideChar
GetStdHandle
SetHandleCount
GetFileType
GetEnvironmentStrings
FlushFileBuffers
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
RtlUnwind
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
WideCharToMultiByte
GetEnvironmentStringsW
HeapSize
VirtualAlloc
GetACP
GetOEMCP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetProcAddress
RaiseException
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

KillTimer
MessageBoxA
SetTimer
DispatchMessageA
DefWindowProcA
PostQuitMessage
PostMessageA
TranslateMessage
GetMessageA
RegisterWindowMessageA
CreateWindowExA
RegisterClassExA
wsprintfA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

winmm

waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetErrorTextA
mixerGetNumDevs
mixerOpen
mixerGetDevCapsA

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

069fee1371bc905159e5575dda7af26e

Headers

File Characteristics

Imports

kernel32

user32

advapi32

winmm

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 84KB - Virtual size: 84KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 84KB - Virtual size: 84KB