9d520d281ee4e36605a7d926c052c3ce57c5780e8d9f2a29106433e9d8b71205

General

Target

9d520d281ee4e36605a7d926c052c3ce57c5780e8d9f2a29106433e9d8b71205
Size

139KB
MD5

81848a95015351e525b0fde4508b88e0
SHA1

6cf1b13ab30f760038b18311772ce0b30e76fea4
SHA256

9d520d281ee4e36605a7d926c052c3ce57c5780e8d9f2a29106433e9d8b71205
SHA512

a751ac15e7eb8f3a078a0c8b3c4f40b57f9f9c2688eef84887d530e5cc72a4ee584e149af640735fe1fa413787cb39ba1a109ef1b13f3a623260db08b37c9d78
SSDEEP

3072:RH61cpCQc1Bjo9vceDvi4zFOh5QYaoSGi/2E:xH9EsioFoLNu

Score

N/A

Malware Config

Signatures

Files

9d520d281ee4e36605a7d926c052c3ce57c5780e8d9f2a29106433e9d8b71205
.exe windows x86

f266cf2ba886a73bdcf4ccb9b2403495

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileW
ExitProcess
FreeEnvironmentStringsW
GetCommandLineW
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetStringTypeW
GetTempPathW
GetTickCount
GetVersionExW
HeapFree
IsBadWritePtr
LCMapStringW
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
MultiByteToWideChar
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WideCharToMultiByte
WriteFile
lstrlenW
HeapAlloc

user32

GetDC
LoadAcceleratorsA
LoadCursorA
LoadIconA
RegisterClassA

ntdll

RtlFreeHeap
RtlAllocateHeap

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

ulib

?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z
??0DSTRING@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f266cf2ba886a73bdcf4ccb9b2403495

Headers

File Characteristics

Imports

kernel32

user32

ntdll

advapi32

ulib

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 127KB - Virtual size: 364KB

.bss Size: - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 102B

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 127KB - Virtual size: 364KB

.bss
Size: - Virtual size: 7KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 102B