be93b42d5c55312e326f8619129906093b52309dccdde0f5b7a9f63b967429cc

General

Target

be93b42d5c55312e326f8619129906093b52309dccdde0f5b7a9f63b967429cc
Size

2.1MB
MD5

7c57ab0927b377a76101a24fbe641463
SHA1

9d5ec73eaf6829e4cb388c8f95fce691a15217e5
SHA256

be93b42d5c55312e326f8619129906093b52309dccdde0f5b7a9f63b967429cc
SHA512

a35f3abf0be7c8f61eeb1331254060964fa24cc1ed64b7464336db2a4244be118c0ed2f153248d10676f605369972dbb33afb8823b84798272079ebc19aa4726
SSDEEP

49152:NwXO21l9449QxS0UVzppQBwpo941l0s6Hg48h0wUczM60xG:NwXOE95QK7Q99siHoh0wVA60xG

Score

N/A

Malware Config

Signatures

Files

be93b42d5c55312e326f8619129906093b52309dccdde0f5b7a9f63b967429cc
.exe windows x86

bb4c8537175bb6a5a0d52cac1b7c0546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
GetTempFileNameA
MoveFileExA
DeleteFileA
Sleep
CopyFileA
GetModuleFileNameA
GetTempPathA
GetProcAddress
LoadLibraryA
GetLastError
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
WriteFile
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetStringTypeA
GetStringTypeW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb4c8537175bb6a5a0d52cac1b7c0546

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 18KB

.rsrc Size: 165KB - Virtual size: 164KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 18KB

.rsrc
Size: 165KB - Virtual size: 164KB