4573225d6f2e538416bbe3882787767ffd04c5c6219f008e713569654bca6c2e

General

Target

4573225d6f2e538416bbe3882787767ffd04c5c6219f008e713569654bca6c2e
Size

368KB
MD5

690528870e6a3321b213179999a4aa50
SHA1

18887d77b790ef64e05b63c497b2d4d4f3c2f630
SHA256

4573225d6f2e538416bbe3882787767ffd04c5c6219f008e713569654bca6c2e
SHA512

701324c71f8f4e6bb121005b4a990a757934fb788f7a0c88589fa68cb4919930a365382c1ab59d36a174e0f5e09902e8563815b9c93709706b4e1357313ef310
SSDEEP

6144:tIE1yzWJRK6fNjAWDJUwaT2HnwCU+FIIfZzK8:tIEzRdfbJUf2Hd6IfZH

Score

N/A

Malware Config

Signatures

Files

4573225d6f2e538416bbe3882787767ffd04c5c6219f008e713569654bca6c2e
.exe windows x86

7595193b2ed3a3af10efd9fd5768a9a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW
SHGetFolderPathW

kernel32

GetTickCount
IsBadCodePtr
IsBadReadPtr
GetVersionExW
GetProcAddress
LoadLibraryW
GlobalFree
GlobalAlloc
SetFileAttributesW
GetFileAttributesW
GetModuleFileNameW
FreeLibrary
VirtualQuery
InterlockedExchange
LoadLibraryA
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
ExitProcess
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zkzplwt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7595193b2ed3a3af10efd9fd5768a9a5

Headers

File Characteristics

Imports

shell32

kernel32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 76KB - Virtual size: 76KB

zkzplwt Size: - Virtual size: 4KB

.text Size: 252KB - Virtual size: 252KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 76KB - Virtual size: 76KB

zkzplwt
Size: - Virtual size: 4KB

.text
Size: 252KB - Virtual size: 252KB