9b9950a3fa7716bd4e10195ebe0383cafbc3917c5d63e6fc0209a57249e4b8c9

General

Target

9b9950a3fa7716bd4e10195ebe0383cafbc3917c5d63e6fc0209a57249e4b8c9
Size

140KB
MD5

96d286e3071bb305621524ce92e38a20
SHA1

a8187841888c14b1a823e99bfc4b57aed5da0d7f
SHA256

9b9950a3fa7716bd4e10195ebe0383cafbc3917c5d63e6fc0209a57249e4b8c9
SHA512

7fcf33e1faf9cde54a95c2d985c6e2d58a44525968fe8ab30689f68196af0122a062475c137bc3a390250eae8e6aa32c9f639fc1bbe2cea3cc9de4e95f885d15
SSDEEP

3072:jprElGl583MkAsytuvn7jbNbgbQ/OYquyyKnvcyM:VrElO9IyC7jbNlxw0

Score

N/A

Malware Config

Signatures

Files

9b9950a3fa7716bd4e10195ebe0383cafbc3917c5d63e6fc0209a57249e4b8c9
.exe windows x86

da35dfccef0c428d90a29a8ceb6938e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CancelIo
CloseHandle
CreateEventW
CreateFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetTempPathW
GetTickCount
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
lstrlenW
GetVersionExW

user32

GetDC
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringW
MessageBoxW
RegisterClassA
SendMessageW
SetForegroundWindow
DefWindowProcW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

ulib

??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0ARRAY@@QAE@XZ
??0DSTRING@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?Initialize@ARRAY@@QAEEKK@Z

ntdll

RtlFreeHeap

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da35dfccef0c428d90a29a8ceb6938e5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ulib

ntdll

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 128KB - Virtual size: 364KB

.bss Size: - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 102B

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 128KB - Virtual size: 364KB

.bss
Size: - Virtual size: 7KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 102B