8b8e435f698e22583b31317f1fd8565e927d114a9bd544082b413771f1be1311

General

Target

8b8e435f698e22583b31317f1fd8565e927d114a9bd544082b413771f1be1311
Size

71KB
MD5

5d7ded56d7bed5d4f6c4a832d839f3b2
SHA1

c7af71eecd28d5e968a008877b308f5c49de5f52
SHA256

8b8e435f698e22583b31317f1fd8565e927d114a9bd544082b413771f1be1311
SHA512

1d919324f9d5fa8bc04be9710a39dc71f0ce0427f682efebb49a7a06d09402e78532b1caac57a9529775270ada66a6464697bf99e19fd7679d85c2a04cce9dff
SSDEEP

1536:ILMPP852olvx4d/2tTuvJUrTwO7GchB26p7l1tM/:VPZolvqUTuvJm7GCg6p7l1a/

Score

N/A

Malware Config

Signatures

Files

8b8e435f698e22583b31317f1fd8565e927d114a9bd544082b413771f1be1311
.exe windows x86

f358867fa95660eedffeb318bc38f599

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
Sleep
LoadLibraryA
FreeLibrary
GetModuleHandleA
WaitForSingleObject
InterlockedIncrement
CloseHandle
GetFileSize
WriteFile
SetFilePointer
CreateFileA
MoveFileExA
OutputDebugStringA
CopyFileA
GetModuleFileNameA
CreateThread
GetProcAddress
GetLastError
CreateMutexA
CreateDirectoryA
CreateProcessA
ExitProcess
ReleaseMutex
OpenMutexA
WinExec
GetCurrentProcess
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
VirtualProtect
VirtualQuery
lstrlenA
GlobalMemoryStatusEx
GetVersionExA
GetSystemDefaultUILanguage
MoveFileA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapFree
TerminateProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
LocalAlloc
InterlockedExchange
RaiseException

Exports

Exports

MyCopyFile

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f358867fa95660eedffeb318bc38f599

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 14KB - Virtual size: 20KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 14KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 1KB