5600ca8288554f2bb6d6c6aa12a938b1e05394c4bdf84052d3b0a0de0d9eca56

General

Target

5600ca8288554f2bb6d6c6aa12a938b1e05394c4bdf84052d3b0a0de0d9eca56
Size

432KB
MD5

531dae1ab72bf4fa19e5c2c851f37ce0
SHA1

efee77f8789afe7205c707814f3bf5419872f8d2
SHA256

5600ca8288554f2bb6d6c6aa12a938b1e05394c4bdf84052d3b0a0de0d9eca56
SHA512

ab66d176f40934ffdd0b353eef72e77b625c2a5928cbf5705653868c9b01a9379593d5b42adb2a053de47c89301147b36f99e001ad05237a14f58951700f25a9
SSDEEP

6144:85RrekOWPJIeRo0N6lVponTq3CMaem5DBl6pHldyfSHVEoMt4/9Fub:8TeXGJro0Nmpoe1annspHn1E7u

Score

N/A

Malware Config

Signatures

Files

5600ca8288554f2bb6d6c6aa12a938b1e05394c4bdf84052d3b0a0de0d9eca56
.exe windows x86

ea262de87e8e961845b1715ce7ecbc63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetTempPathW
VirtualAlloc
GetProcAddress
CreateEventA
CreateMutexA
RemoveDirectoryW
LoadLibraryW
GetLastError
VirtualProtectEx
GetSystemTime
CloseHandle
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
VirtualQuery
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RaiseException
RtlUnwind
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoA
VirtualProtect
GetSystemInfo

user32

ImpersonateDdeClientWindow
DdeSetQualityOfService
SendMessageA
PostMessageA
PeekMessageA
ShowWindow
GetSystemMetrics

Sections

.INIT
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 388KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea262de87e8e961845b1715ce7ecbc63

Headers

File Characteristics

Imports

kernel32

user32

Sections

.INIT Size: 4KB - Virtual size: 1KB

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 388KB - Virtual size: 385KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 448KB

.INIT
Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 388KB - Virtual size: 385KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 448KB