f94702bcb17e512cccc75cb6d159721b1655f3225e487853fde1169167a8beb9

General

Target

f94702bcb17e512cccc75cb6d159721b1655f3225e487853fde1169167a8beb9
Size

252KB
MD5

80f2748cb5a4057033e70af7124ea370
SHA1

841f777673f4ea2c94d92a324d79dd96d3962868
SHA256

f94702bcb17e512cccc75cb6d159721b1655f3225e487853fde1169167a8beb9
SHA512

4282e1846487b555d044695a756951b57019ddcddd4624066fb9c7863cfd0912413dc8fa35e483849fd222b5e83a9b6af7d148f8959190e6e26e498e5e7b686c
SSDEEP

6144:udT/HsMpEM1J2u9Wfa6Mmi1JYpgs+jT6z:uB/HsM5T2usfBi7rs+je

Score

N/A

Malware Config

Signatures

Files

f94702bcb17e512cccc75cb6d159721b1655f3225e487853fde1169167a8beb9
.exe windows x86

26b66790a608ad046d81d822d2378376

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
CreateThread
Sleep
InterlockedDecrement
GetModuleHandleA
RemoveDirectoryA
ExitProcess
VirtualAlloc
GetCommandLineA
VirtualFree
DeleteFileW
GetProcAddress
LoadLibraryA
VirtualProtect
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetLastError
MultiByteToWideChar
InterlockedIncrement
GetStringTypeA
GetStartupInfoA
GetVersionExA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
GetSystemInfo

user32

DestroyWindow
ShowWindow
FindWindowA

winscard

SCardGetCardTypeProviderNameW

avifil32

AVIClearClipboard

msvfw32

DrawDibStop

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26b66790a608ad046d81d822d2378376

Headers

File Characteristics

Imports

kernel32

user32

winscard

avifil32

msvfw32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 124KB - Virtual size: 121KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 84KB - Virtual size: 136KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 124KB - Virtual size: 121KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 84KB - Virtual size: 136KB