bd8579fdf65cc947d2c96b0c8e1458865d1e462342f067996a77eef557086d53

General

Target

bd8579fdf65cc947d2c96b0c8e1458865d1e462342f067996a77eef557086d53
Size

608KB
MD5

4400b07bd62a8ea44fcd280d379d43f6
SHA1

4b51b2142fa65de009a7b52a2d718903ae225b68
SHA256

bd8579fdf65cc947d2c96b0c8e1458865d1e462342f067996a77eef557086d53
SHA512

b48d8aac421feca46a89c3963db024022937f9c1278d659a9a81f78c9f4a32ff92bc214dcb4b74e0871085fbb7ef40dbdc9450be295fe8e7c06f35b1f7f7a542
SSDEEP

12288:J2iwn/ND7S3xI66S/H3UyKxWn2hJ+MRmhhhHoFMf:J213Sed0XjhJoFMf

Score

N/A

Malware Config

Signatures

Files

bd8579fdf65cc947d2c96b0c8e1458865d1e462342f067996a77eef557086d53
.exe windows x86

a9042500c45caf1e96695e809a07a5db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
CloseHandle
FreeLibrary
GetTempPathA
GetFileAttributesA
GetComputerNameA
GetCurrentDirectoryA
GetModuleFileNameA
SetErrorMode
WriteFile
GetTickCount
CreateFileA
GetLastError
CreateMutexA
OpenMutexA
VirtualProtect
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo

shell32

ShellExecuteA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 400KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9042500c45caf1e96695e809a07a5db

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 400KB - Virtual size: 398KB

.rsrc Size: 160KB - Virtual size: 159KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 400KB - Virtual size: 398KB

.rsrc
Size: 160KB - Virtual size: 159KB