c2104c937013771983072f2491940307ff997ba1d84832975cf763dd184ed4cc

Sharing

Copy URL

Twitter E-mail

General

Target

c2104c937013771983072f2491940307ff997ba1d84832975cf763dd184ed4cc
Size

132KB
MD5

807d17a8482886e4e5d0dcc0efdad813
SHA1

4c32b19f30f0813649709f09a4d6aac5250ae288
SHA256

c2104c937013771983072f2491940307ff997ba1d84832975cf763dd184ed4cc
SHA512

a1306f98875056622a8763ac1ea975a7c4f517bae2f61b7b549ff7826a3b388bf439a26e4d9211e9b930f2bd3850e9bea56479b5aac5eff62bc89139e26929a5
SSDEEP

3072:klchOdrS6+IsMWA2J3cl8QMGAgtpusKM+v3uygDfmk:kuWm6CMl27QMWKd+ymfm

Score

N/A

Malware Config

Signatures

Files

c2104c937013771983072f2491940307ff997ba1d84832975cf763dd184ed4cc
.exe windows x86

293b2b5fde794e6710206fff0e2c1dff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
Sleep
GetProcAddress
InterlockedExchange
VirtualFree
GetTickCount
CloseHandle
SetEvent
ResumeThread
SystemTimeToFileTime
SetFirmwareEnvironmentVariableA
CreateMutexA
GetLastError
RemoveDirectoryA
GetSystemTime
GetSystemDirectoryA
GetTempPathA
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
HeapSize
LocalFree
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
HeapFree
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

ShowWindow
EnableWindow
LoadImageA
PostMessageA
LoadBitmapA
GetSystemMetrics
FindWindowA
GetFocus
EnumWindows
LoadIconA
GetActiveWindow
MessageBoxA

winmm

midiStreamOut
midiOutReset
midiStreamRestart
joySetCapture

dnsapi

DnsAcquireContextHandle_A

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VDXE
Size: 4KB - Virtual size: 948B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

293b2b5fde794e6710206fff0e2c1dff

Headers

File Characteristics

Imports

kernel32

user32

winmm

dnsapi

Sections

.text Size: 36KB - Virtual size: 34KB

.VDXE Size: 4KB - Virtual size: 948B

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 16KB - Virtual size: 14KB

.rsrc Size: 16KB - Virtual size: 15KB

.ldata Size: 44KB - Virtual size: 41KB

.text
Size: 36KB - Virtual size: 34KB

.VDXE
Size: 4KB - Virtual size: 948B

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 14KB

.rsrc
Size: 16KB - Virtual size: 15KB

.ldata
Size: 44KB - Virtual size: 41KB