deef2da3bca8527b2b008d33e07b9cf59edd517b60b92a37dcf56be2a6e7138f

General

Target

deef2da3bca8527b2b008d33e07b9cf59edd517b60b92a37dcf56be2a6e7138f
Size

208KB
MD5

68d3648efbf7f65160c93ddb32838555
SHA1

d054694559ba65e5698196db26abed8baa61b495
SHA256

deef2da3bca8527b2b008d33e07b9cf59edd517b60b92a37dcf56be2a6e7138f
SHA512

d4d7a3a7d71020fa591fba632b9ac802330c0620a7bea6d511f3254424785c819f18307a0b220f2a8476f07c1805973a68717d2270a0a2efa81d3ae7cfe11898
SSDEEP

3072:QfIYKlcMrJWMi3+aME1LbvYG9ASiLtkUR+VThL5fnmGX79a4E+9y:Qf1M9WMiZQ9LtkUsVh5fnmU7mU

Score

N/A

Malware Config

Signatures

Files

deef2da3bca8527b2b008d33e07b9cf59edd517b60b92a37dcf56be2a6e7138f
.exe windows x86

a55245a0c06631f54e30ca62f7881a52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
lstrcpynA
FormatMessageA
GetLastError
Sleep
CloseHandle
GetCurrentThreadId
Thread32Next
Thread32First
CreateToolhelp32Snapshot
CreateProcessA
Process32Next
WaitForSingleObject
OpenProcess
TerminateProcess
Process32First
VirtualProtect
GetLocaleInfoA
GetStringTypeW
ExitProcess
GetModuleHandleA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
ReadFile
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetSystemInfo

user32

PeekMessageA
PostThreadMessageA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a55245a0c06631f54e30ca62f7881a52

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 172KB - Virtual size: 175KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 172KB - Virtual size: 175KB