c9e7a979986c971ff34c98e128d34b8e4cc1c864ba2e5772287fadc2af73d8ca

Sharing

Copy URL Twitter E-mail

General

Target

c9e7a979986c971ff34c98e128d34b8e4cc1c864ba2e5772287fadc2af73d8ca
Size

500KB
MD5

a019edb6e8830ef3ecd0d5fdb2f2943e
SHA1

6e7e7abf5fef1079ccfb6cb0ff6e348e50250424
SHA256

c9e7a979986c971ff34c98e128d34b8e4cc1c864ba2e5772287fadc2af73d8ca
SHA512

b7d58ed76062d91e2d02732b1ba4110c376aaffe56f878353ed0b77d309d77e2901ef2f19cb88958c9113b6b4d4b796050e44a8883e624f9ba4ced30eb5398fb
SSDEEP

12288:CD/KwQeTf9+3KV+CgJS2WKOcz4T35LMeRk8ERqFs9lWrp:CD/KwQez8aV+CMSeDml9sws9lW

Score

N/A

Malware Config

Signatures

Files

c9e7a979986c971ff34c98e128d34b8e4cc1c864ba2e5772287fadc2af73d8ca
.exe windows x86

6789c3f5b1232e27c17d87afd67676bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
InterlockedIncrement
ExitProcess
VirtualFree
GetModuleHandleA
GetProcAddress
InterlockedExchange
Sleep
GetTickCount
SetEvent
SetFirmwareEnvironmentVariableW
CreateMutexA
VirtualAlloc
SetStdHandle
SetFilePointer
GetLocaleInfoA
VirtualQuery
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
GetStringTypeW
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
WriteFile
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
FlushFileBuffers

user32

EnableWindow
MessageBoxA
SendMessageA
LoadImageW
ShowWindow
PeekMessageA
DestroyWindow

winmm

midiStreamStop

Exports

Exports

?EnumWindowsProc@@YIHKK@Z

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VDXE
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.INIT2
Size: 4KB - Virtual size: 495B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 777KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6789c3f5b1232e27c17d87afd67676bc

Headers

File Characteristics

Imports

kernel32

user32

winmm

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.VDXE Size: 4KB - Virtual size: 102B

.INIT2 Size: 4KB - Virtual size: 495B

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 7KB

.vdata Size: 12KB - Virtual size: 9KB

.rsrc Size: 408KB - Virtual size: 777KB

.text
Size: 56KB - Virtual size: 55KB

.VDXE
Size: 4KB - Virtual size: 102B

.INIT2
Size: 4KB - Virtual size: 495B

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 7KB

.vdata
Size: 12KB - Virtual size: 9KB

.rsrc
Size: 408KB - Virtual size: 777KB