1f5973a41950c82ff9c8abdd20fb715c8e3a6833cdb45d21d12527270bdf80b0

General

Target

1f5973a41950c82ff9c8abdd20fb715c8e3a6833cdb45d21d12527270bdf80b0
Size

204KB
MD5

aec625fa904207d43ab78130c59c94d4
SHA1

2af59e8149c1032d4f970522cd0faa34070fd31d
SHA256

1f5973a41950c82ff9c8abdd20fb715c8e3a6833cdb45d21d12527270bdf80b0
SHA512

af6a13d1562dad479c7e9581ef872a230dcf462abb003c15d0233cb3f05d2f8e7ca67ef1af828730f76904cffb679e7a3ed79fad3a86068512d962701a72a109
SSDEEP

3072:ncNnXuE5IbfHuZRdDdkVexWy5i/hEd7pVmA74eKmeK1Bnyo2wQl7g6E:cNnXzq7+ZWMjCid7p0a/eKLcI6

Score

N/A

Malware Config

Signatures

Files

1f5973a41950c82ff9c8abdd20fb715c8e3a6833cdb45d21d12527270bdf80b0
.exe windows x86

a8aef5bce9465c2135139e9c3f029849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetLocaleInfoW
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetLastError
CloseHandle
WriteFile
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetProcAddress
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
GetACP
GetOEMCP
LoadLibraryA
CreateFileA
SetEnvironmentVariableA

shell32

ShellExecuteA

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

crgthrt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8aef5bce9465c2135139e9c3f029849

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 32KB - Virtual size: 32KB

crgthrt Size: - Virtual size: 4KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 32KB - Virtual size: 32KB

crgthrt
Size: - Virtual size: 4KB