b01273b9214e63284a4ca749ae32c9408eb84dbda03597433088a5e63dc7cb76

General

Target

b01273b9214e63284a4ca749ae32c9408eb84dbda03597433088a5e63dc7cb76
Size

276KB
MD5

6d68ff849ca32c07a2ba71485ba084c0
SHA1

1b53a0a462c357f04c3ed12766c143d1f1d5fb94
SHA256

b01273b9214e63284a4ca749ae32c9408eb84dbda03597433088a5e63dc7cb76
SHA512

5e2d24c6262e11f54f17f9b36bec631afd0f1ec60bc547f406a4de85ede6eb379a98519037ee8795510701e0251367560350c9dcbf1db50a4f374ac9574789b2
SSDEEP

3072:1grC1j/JOl5+Va+vsEs5Advt753lcHH0CHLpFjjCY6Df3HcibGao/k/4LcqJL3Bp:1EC14+BP8Ad1vuHpoffGbnLPSFOHn9

Score

N/A

Malware Config

Signatures

Files

b01273b9214e63284a4ca749ae32c9408eb84dbda03597433088a5e63dc7cb76
.exe windows x86

b34ef265167fe6a6e4ebaafbcf0158c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
DeleteFileA
ReadFile
GetModuleHandleW
RemoveDirectoryW
VirtualAlloc
GetCommandLineA
TerminateProcess
Sleep
GetProcAddress
InterlockedDecrement
LocalAlloc
CloseHandle
GetLocaleInfoA
LCMapStringW
LCMapStringA
HeapSize
SetFilePointer
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
LoadLibraryExA
CreateThread
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
InterlockedExchange
RtlUnwind
HeapAlloc
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
SetStdHandle

user32

FindWindowA
LoadBitmapA
LoadIconA
LoadBitmapW
EnableWindow
ReleaseDC
PostMessageA
GetDesktopWindow

advapi32

DecryptFileA

ole32

CoUninitialize

winmm

auxSetVolume
mciSendCommandA

shlwapi

SHOpenRegStream2A

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b34ef265167fe6a6e4ebaafbcf0158c7

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

winmm

shlwapi

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 152KB - Virtual size: 153KB

.rsrc Size: 84KB - Virtual size: 113KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 152KB - Virtual size: 153KB

.rsrc
Size: 84KB - Virtual size: 113KB