2d1995f8032b6f51e9018e35bf8a04eb1240ecad96a9f271333c6820b8278317

Sharing

Copy URL Twitter E-mail

General

Target

2d1995f8032b6f51e9018e35bf8a04eb1240ecad96a9f271333c6820b8278317
Size

464KB
MD5

4abebc07508e37942b6252be7c021a00
SHA1

a9d19e8ba26fe302c6dc6193b31bfac8c56a762a
SHA256

2d1995f8032b6f51e9018e35bf8a04eb1240ecad96a9f271333c6820b8278317
SHA512

7f5a818a12b6bc6992597caaafeb321129699701ed3567d6bef25ad1d27912828324d3c9d98f1a97b320baa091b1ca05dddc5f65598f602a422207c3467729db
SSDEEP

12288:xYTfLe5RL35s47JVYt1yb6B8L2O8MEFSM+U:xYTfLePLicV8DB818+

Score

N/A

Malware Config

Signatures

Files

2d1995f8032b6f51e9018e35bf8a04eb1240ecad96a9f271333c6820b8278317
.exe windows x86

b54dc1f288d09e61027e966594a5a914

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

TerminateProcess
ExitProcess
OpenEventA
GetProcAddress
GetTickCount
VirtualAlloc
GetLastError
LoadLibraryA
GetSystemDirectoryA
lstrcpyA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
IsBadWritePtr
IsBadReadPtr
HeapValidate
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
RtlUnwind
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
CloseHandle

user32

SetWindowTextA
ReleaseDC
GetWindowTextA
SendMessageA
GetFocus
ShowWindow
EnableWindow
LoadIconA
SetActiveWindow

ole32

CoInitialize
CoUninitialize

Exports

Exports

?FCalcI@@YAKK@Z

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 821KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b54dc1f288d09e61027e966594a5a914

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.data Size: 4KB - Virtual size: 7KB

.gdata Size: 4KB - Virtual size: 3KB

.tls Size: 4KB - Virtual size: 129B

.rsrc Size: 396KB - Virtual size: 821KB

.text
Size: 52KB - Virtual size: 51KB

.data
Size: 4KB - Virtual size: 7KB

.gdata
Size: 4KB - Virtual size: 3KB

.tls
Size: 4KB - Virtual size: 129B

.rsrc
Size: 396KB - Virtual size: 821KB