711b8eae591a1263be3bb9d7335d7aee131e6ec946d7b02d50bd4891d8691a65

Sharing

Copy URL

Twitter E-mail

General

Target

711b8eae591a1263be3bb9d7335d7aee131e6ec946d7b02d50bd4891d8691a65
Size

244KB
MD5

90bb71d6b2ad3c4e69c134ae01cc1d80
SHA1

a1ee32519f77bf8af82f8134609da003f6d305ab
SHA256

711b8eae591a1263be3bb9d7335d7aee131e6ec946d7b02d50bd4891d8691a65
SHA512

c2d7461bb2e4a09ce36e638239a72b3ff106c8424833e58b730c472f1d6b633cad781e58c92652d0ed99ad0a11ceca5130034f5a357b0655c130e693d2113b40
SSDEEP

3072:QjyQE1Jlrgku8X2rrP9/4Za5lq27nki3IMtnd9hh7DZUNaeqr6/qiFTqPsg:Qez92nPVAajnki3IMtd9WNafHil1g

Score

N/A

Malware Config

Signatures

Files

711b8eae591a1263be3bb9d7335d7aee131e6ec946d7b02d50bd4891d8691a65
.exe windows x86

cb27ca3be9029d584d91a8ef7fe0f666

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
TerminateThread
OpenFileMappingA
GetCurrentProcess
GetLastError
VirtualFree
GetLocalTime
VirtualAlloc
ExitProcess
InterlockedDecrement
LoadLibraryA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
VirtualAllocEx
GetProcAddress
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
GetSystemInfo

user32

LoadIconA
UpdateWindow
CloseWindow
GetDesktopWindow
SendMessageA
LoadBitmapA
GetLastActivePopup

gdi32

SelectObject
FloodFill

ole32

CoCreateInstance

psapi

EmptyWorkingSet

msvfw32

DrawDibStop

msacm32

acmMetrics

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lda
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vgld
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb27ca3be9029d584d91a8ef7fe0f666

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

psapi

msvfw32

msacm32

Sections

.text Size: 16KB - Virtual size: 15KB

.lda Size: 4KB - Virtual size: 1KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 5KB

.vgld Size: 32KB - Virtual size: 31KB

.rsrc Size: 160KB - Virtual size: 217KB

.text
Size: 16KB - Virtual size: 15KB

.lda
Size: 4KB - Virtual size: 1KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 5KB

.vgld
Size: 32KB - Virtual size: 31KB

.rsrc
Size: 160KB - Virtual size: 217KB