49da13502c8a316bcbc95f738f3555c8923ee852b2ef92a4da0b97837c9173a2

General

Target

49da13502c8a316bcbc95f738f3555c8923ee852b2ef92a4da0b97837c9173a2
Size

59KB
MD5

6b64c33c7b9039aaa3e380e5a487c94d
SHA1

edb2e5ad0ffa62ea9e914ac519cec331d9b60dde
SHA256

49da13502c8a316bcbc95f738f3555c8923ee852b2ef92a4da0b97837c9173a2
SHA512

054dd83ab7337dab6801182656c303534dddb8d73c9cd262efafe7d3594fb069f8cfc7dd8571ba272b64dff65bb22b6e4adaa8199147aa3bc5ab78382abcd0b2
SSDEEP

768:a6E8i6hg36AJFENnpTmAEGccV9hKHnnrCfsWq6OpBK9DacyTm6mRuCvxPQN:m6hg3j+fTzc9HrCfbq6OpgRacQC2N

Score

N/A

Malware Config

Signatures

Files

49da13502c8a316bcbc95f738f3555c8923ee852b2ef92a4da0b97837c9173a2
.exe windows x86

3ad214e8fecb4d1fd38ed6186782284f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
Sleep
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
CreateEventA
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
InterlockedExchange
CancelIo
GetLastError
GetFileAttributesA
CreateProcessA
WinExec
GetProcAddress
LoadLibraryA
lstrlenA
GetVersionExA
lstrcpyA
TerminateThread
Process32Next
Process32First
MoveFileA
DeleteFileA
lstrcatA
GlobalMemoryStatus
GetSystemInfo
OpenEventA
GetTickCount
SetErrorMode
CreateMutexA
CopyFileA
GetModuleFileNameA
GetSystemTime
GetCurrentThreadId
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
WriteFile
ReadFile
GetFileSize
CreateFileA
GetSystemDirectoryA
GetStartupInfoA
CreatePipe
DisconnectNamedPipe
TerminateProcess
LocalFree
LocalAlloc
PeekNamedPipe
WaitForMultipleObjects
GetCurrentProcess
lstrcmpiA
RaiseException
FreeLibrary
GetModuleHandleA

msvcrt

ceil
_ftol
strlen
strstr
memset
??2@YAPAXI@Z
memcmp
__CxxFrameHandler
_CxxThrowException
strrchr
malloc
atoi
strcat
free
strcpy
strchr
exit
_except_handler3
strncat
_beginthreadex
calloc
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memmove
memcpy
??3@YAXPAX@Z
_strnicmp
_strupr
_strcmpi

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ad214e8fecb4d1fd38ed6186782284f

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 16B