fd759b0ae3c6687e8f9950ed8913aafdd5159f0e615d6b87a0eefe66907044ce

General

Target

fd759b0ae3c6687e8f9950ed8913aafdd5159f0e615d6b87a0eefe66907044ce
Size

149KB
MD5

805f325480881879397ce312cd7def60
SHA1

cdf56c82eeb8ced96cfca35bac99dd53e9fbfa67
SHA256

fd759b0ae3c6687e8f9950ed8913aafdd5159f0e615d6b87a0eefe66907044ce
SHA512

c948e4e7a22bd8f583b6c5830487e04ad89432ea90441d6ed9f659df99b90a9473702223c8b1a7dd48fe9f12f821ce0d8a54354bdb1bfe76fc724a01ad2f8c35
SSDEEP

3072:s4dvsKtWmih5gvP3R/QNR0HYrmWW5kPeDHeRx1q0JRJalQVs+8NDfx0:pdvsKtuh2HGv5rxW5UTEwbalwe

Score

N/A

Malware Config

Signatures

Files

fd759b0ae3c6687e8f9950ed8913aafdd5159f0e615d6b87a0eefe66907044ce
.exe windows x86

d11ae554cf8e06ef4cff41a05efb87a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
memcpy
fseek
ftell
fread
strlen
strcpy
strcat
fabs
ceil
malloc
floor
free
fclose
_CItanh
_CIpow

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
HeapAlloc
HeapFree
FreeLibrary
CloseHandle
CreateFileA
SetFilePointer
SetEndOfFile
WriteFile
GetVersionExA
TlsAlloc
HeapReAlloc

user32

ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
SetMenu
DestroyMenu
FillRect
DestroyIcon

gdi32

GetStockObject
GetDeviceCaps
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
GetObjectType
CreateDIBSection
DeleteObject
SelectObject
BitBlt
CreateBitmap
SetPixel

winmm

timeEndPeriod

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.code
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 315B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ta
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

src
Size: 121KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pwstzsx
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d11ae554cf8e06ef4cff41a05efb87a9

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

winmm

wsock32

Sections

.code Size: 10KB - Virtual size: 10KB

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 512B - Virtual size: 315B

.ta Size: 2KB - Virtual size: 3KB

src Size: 121KB - Virtual size: 149KB

pwstzsx Size: - Virtual size: 4KB

.code
Size: 10KB - Virtual size: 10KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 512B - Virtual size: 315B

.ta
Size: 2KB - Virtual size: 3KB

src
Size: 121KB - Virtual size: 149KB

pwstzsx
Size: - Virtual size: 4KB