effd7ae855b3dbf8df370508d5fbba04ba1d227d1ca2e71f94ee7aea3c02c4ed

General

Target

effd7ae855b3dbf8df370508d5fbba04ba1d227d1ca2e71f94ee7aea3c02c4ed
Size

3.9MB
MD5

11c0c7581c0572f57a6b65a4d8673dd4
SHA1

ac1b0c004fb2609c3d28bde86c046059b5f2506a
SHA256

effd7ae855b3dbf8df370508d5fbba04ba1d227d1ca2e71f94ee7aea3c02c4ed
SHA512

ba70a5564c459f51fb944e62eb0d8f9d6988d4bc96c0fac70085efdd0e7626a5ff8bc9b3790a0651cb2fbc7ae7ba31edd49ed7420f799431fba1c098e20a79bd
SSDEEP

98304:uoSJtAZsr+78gClCJKI4f1riCnXvwxtUZvwNgYvEbk4n:1Egsr65cI4f1mwXIrUVwpsR

Score

N/A

Malware Config

Signatures

Files

effd7ae855b3dbf8df370508d5fbba04ba1d227d1ca2e71f94ee7aea3c02c4ed
.exe windows x86

fe2d96a456dafbd0c70f4c44efe5b179

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
Sleep
GetProcAddress
SleepEx
WaitForSingleObject
VirtualAllocEx
VirtualProtectEx
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle
ReadFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
WriteFile
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetStringTypeW

user32

GetMessageA
DispatchMessageA

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATAX
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe2d96a456dafbd0c70f4c44efe5b179

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 28KB

DATAX Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 28KB

DATAX
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 8KB - Virtual size: 5KB