f14292d0992bae2b128ccbc8be2566896da8d57be752445ab8ade5844376b3fa

General

Target

f14292d0992bae2b128ccbc8be2566896da8d57be752445ab8ade5844376b3fa
Size

631KB
MD5

654d6d27d617a3da5bbfaf016dcecfc0
SHA1

a5a4437d12dc521bc50091f89f5ae926f865b3d2
SHA256

f14292d0992bae2b128ccbc8be2566896da8d57be752445ab8ade5844376b3fa
SHA512

905defd9e482761619968e78ed6fc9c585056d9f9f814d6ee5d1e1bff6e201e7d55f4c31778f0cd35137ff40f1409993a1b462d7fc36937536280e31c05f02ae
SSDEEP

12288:VfxtxsdOyO0DPySfJxr+TW53aoW2yi5Q4ugMeMR9M52WI:Vfxtxs8GPySfJxr+TW53aSyiq4ugMx9m

Score

N/A

Malware Config

Signatures

Files

f14292d0992bae2b128ccbc8be2566896da8d57be752445ab8ade5844376b3fa
.exe windows x86

e2d57cdc61495cd9ab973f3a2543daa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
LeaveCriticalSection
WideCharToMultiByte
ResetEvent
InterlockedExchange
lstrlenA
GetPrivateProfileSectionNamesA
lstrcatA
GetWindowsDirectoryA
FreeLibrary
GetPrivateProfileStringA
DeleteFileA
CreateDirectoryA
CreateProcessA
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
LocalFree
FindFirstFileA
MoveFileA
MultiByteToWideChar
Sleep
RaiseException
LocalAlloc
GetStartupInfoA
GetModuleHandleA
GetLastError

msvcrt

memmove
ceil
_ftol
strlen
strstr
memcmp
_purecall
strcat
strcmp
strchr
malloc
strcpy
__CxxFrameHandler
_except_handler3
strrchr
_CxxThrowException
exit
atoi
strncmp
strncpy
_errno
wcscpy
strncat
_beginthreadex
rand
srand
sprintf
vsprintf
sscanf
calloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
free
_strnicmp
_strcmpi
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z

Sections

.text
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2d57cdc61495cd9ab973f3a2543daa5

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 515KB - Virtual size: 515KB

.rodata Size: 11KB - Virtual size: 10KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 47KB - Virtual size: 510KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 515KB - Virtual size: 515KB

.rodata
Size: 11KB - Virtual size: 10KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 47KB - Virtual size: 510KB

.rsrc
Size: 15KB - Virtual size: 14KB