04cbe47b1bf43dbc80740afb26edbf06b0baf63ac3e7801fa3d6d2e259acc019

General

Target

04cbe47b1bf43dbc80740afb26edbf06b0baf63ac3e7801fa3d6d2e259acc019
Size

820KB
MD5

61dee21cfb7266594806121500793e10
SHA1

619844e1d2bb86f03a14150c505555400005b6f4
SHA256

04cbe47b1bf43dbc80740afb26edbf06b0baf63ac3e7801fa3d6d2e259acc019
SHA512

ec1929fca93c6398cae70b1137e7bc5991004ce3988dc1cd04af5d4bac41e5c3df91d77f96d94732afbd877400438831cb0650b77dba5d95a179689dc80b0c76
SSDEEP

12288:Qzeqj5jm4Xq+Ry71px3y6k8AUK3fHJSJnjGHKR/zzfQ1WdsKxhtav/ydz:QdmqzRN6k83KxgKHIvQ81H4/

Score

N/A

Malware Config

Signatures

Files

04cbe47b1bf43dbc80740afb26edbf06b0baf63ac3e7801fa3d6d2e259acc019
.exe windows x86

af898d43161747f74c55cc2a409a28bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
ReadFile
GetProcAddress
LoadLibraryA
GetCurrentThread
TerminateThread
ResumeThread
GetModuleHandleA
GetLastError
CloseHandle
InterlockedExchange
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
WaitForSingleObject
CreateMutexA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
CreateFileA

ws2_32

send

msacm32

acmFormatDetailsA
acmFormatEnumA

avifil32

AVIFileInit

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 776KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af898d43161747f74c55cc2a409a28bb

Headers

File Characteristics

Imports

kernel32

ws2_32

msacm32

avifil32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 776KB - Virtual size: 780KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 776KB - Virtual size: 780KB

.rsrc
Size: 8KB - Virtual size: 7KB