e9713745b4f377afd4c6fe64f71cf60eb154c1a042e12d13485d5ddf5226b23c

General

Target

e9713745b4f377afd4c6fe64f71cf60eb154c1a042e12d13485d5ddf5226b23c
Size

392KB
MD5

545766b775eea0693b7d2c3345843a30
SHA1

0e2a1ca9594d2be9953f3420455e8e5cfe9d6442
SHA256

e9713745b4f377afd4c6fe64f71cf60eb154c1a042e12d13485d5ddf5226b23c
SHA512

c8ee031bf0b04e17caaa85e769f978b417554ad5c0622e9ee3cd9205c599544585dbb4eb37b86960e041b966cc33d50c0d9c9a4bec8449bddcea7a7e84864167
SSDEEP

12288:s8vLtrKIJSoiQXdLZk6u0frYzCQcCY7iu:BWoiNZAYzCQu7i

Score

N/A

Malware Config

Signatures

Files

e9713745b4f377afd4c6fe64f71cf60eb154c1a042e12d13485d5ddf5226b23c
.exe windows x86

2b4561206437c6574ea341aa46905814

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

wcslen
strcspn
memchr
sprintf
strtol
strtoul
NtQueryVirtualMemory
RtlUnwind
strlen
memmove
memset
memcpy

kernel32

FreeEnvironmentStringsA
GetLocaleInfoW
SetEndOfFile
CreateFileA
GetTimeZoneInformation
GetVersionExA
GetUserDefaultLCID
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
ExitProcess
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
TerminateProcess
GetCurrentProcess
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapAlloc
HeapSize
GetLastError
WriteFile
SetFilePointer
FlushFileBuffers
HeapFree
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
SetEnvironmentVariableA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ReadFile
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
LCMapStringA
LCMapStringW

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2b4561206437c6574ea341aa46905814

Headers

File Characteristics

Imports

ntdll

kernel32

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 248KB - Virtual size: 254KB

.sxdata Size: 4KB - Virtual size: 4B

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 248KB - Virtual size: 254KB

.sxdata
Size: 4KB - Virtual size: 4B