b21d3919d5f7ff4cc855be5a0d3faa4582fef005e0b2b244eff5d450dd429f0f

General

Target

b21d3919d5f7ff4cc855be5a0d3faa4582fef005e0b2b244eff5d450dd429f0f
Size

172KB
MD5

431386b7c9cf587cc7499b8cf43c1d01
SHA1

0419eb85e5b82dbc91bdc8ed6f957135b391f2c7
SHA256

b21d3919d5f7ff4cc855be5a0d3faa4582fef005e0b2b244eff5d450dd429f0f
SHA512

1d50a246c825a8b9e349dd079bcd4f61ae30dc734f4627ff535c61242f3230953e930b3616b716f749055f516ff1defa591e40a8b284cba39ee9b70470a480c4
SSDEEP

3072:Nfp8wKj+s6+Y7iuR2vmtTGxLR9/3lJIixtgUF:RpShqiW+mtT+d33Ii7F

Score

N/A

Malware Config

Signatures

Files

b21d3919d5f7ff4cc855be5a0d3faa4582fef005e0b2b244eff5d450dd429f0f
.exe windows x86

127e6cac1085b2c21f01f50258f1ca31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CloseHandle
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileSectionNamesA
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA
GetVersionExA
CreateDirectoryA
GetFileAttributesA
GetDriveTypeA
GetDiskFreeSpaceExA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
SetLastError
lstrcatA
GetLocalTime
GetTickCount
CreateMutexA
HeapFree
HeapAlloc
GlobalFree
GlobalLock
GlobalAlloc
GlobalSize
CreatePipe
GetLastError
RtlUnwind
RaiseException
MoveFileA
ExitProcess
TerminateProcess
GetCurrentProcess
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TlsAlloc
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
LocalAlloc
InterlockedExchange

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

127e6cac1085b2c21f01f50258f1ca31

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 124KB - Virtual size: 121KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 24KB - Virtual size: 32KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 124KB - Virtual size: 121KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 24KB - Virtual size: 32KB

.rsrc
Size: 4KB - Virtual size: 2KB