f93a38301e4c42258e1f03db64d2f6e09aeef391194311cf17d053d87354886c

General

Target

f93a38301e4c42258e1f03db64d2f6e09aeef391194311cf17d053d87354886c
Size

472KB
MD5

91376fe45641d9ac2f15072cbf4d17a1
SHA1

275023550e4e6ce0043dcac57d8267d5cf249fd0
SHA256

f93a38301e4c42258e1f03db64d2f6e09aeef391194311cf17d053d87354886c
SHA512

0bbda9c4f4a3f43eba8d19f02c5f3ac8950588b2c43893d939c33ea75341d0bea1c5c886d1f54613cf5cc1171ab36b41f5d826a79380cb6e34eb5addb767d22d
SSDEEP

12288:IaT4KQj/VmENHK9wb+Ha02MBU8Vezlmi3lHbuad+sp/p5tz:JT4J/po6Oh2F8qlmi9bxdrpBD

Score

N/A

Malware Config

Signatures

Files

f93a38301e4c42258e1f03db64d2f6e09aeef391194311cf17d053d87354886c
.exe windows x86

114c8179d4cc8a5d449abcfc00b72cca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetLastError
GetProcAddress
VirtualAlloc
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
RaiseException
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
ReadConsoleInputA
SetConsoleMode
GetConsoleMode

lz32

LZCopy

Exports

Exports

?Exfit2@@YAKKK@Z

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 730KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 388KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

114c8179d4cc8a5d449abcfc00b72cca

Headers

File Characteristics

Imports

kernel32

lz32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 730KB

.rsrc Size: 388KB - Virtual size: 387KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 730KB

.rsrc
Size: 388KB - Virtual size: 387KB