ef9444a4788d53bf18b5c6fed6fb7f79d94834136de7eb63fd2d3a30690eadbe

General

Target

ef9444a4788d53bf18b5c6fed6fb7f79d94834136de7eb63fd2d3a30690eadbe
Size

326KB
MD5

03d18ed4e5cf0d6fa4c7091dce0bd18f
SHA1

3bcb7697f0dd35df86230dcaa5ee28db446e9ed9
SHA256

ef9444a4788d53bf18b5c6fed6fb7f79d94834136de7eb63fd2d3a30690eadbe
SHA512

57f461cbe683c7deedab49e5e3d3c26196afe5c60602429352aae8c9796ef5a821a7aff8b86b766ae27fb3dcfaa19fb394f149a4e51dab302aa1f8a984cf2a9d
SSDEEP

6144:lgRaUSAnPcJmdGtFqnxVGNFBg6yR1ppU6lcN9qVMbjCTnBba361N1bc6:lgRSAnkJAGtFieto9zlibjaBO3C1bT

Score

N/A

Malware Config

Signatures

Files

ef9444a4788d53bf18b5c6fed6fb7f79d94834136de7eb63fd2d3a30690eadbe
.exe windows x86

66e42332cebb311ab4a3b1318614c1cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
ExitProcess
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
WriteFile
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
DebugBreak
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
VirtualQuery
InterlockedExchange
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66e42332cebb311ab4a3b1318614c1cb

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 248KB - Virtual size: 253KB

.rsrc Size: 4KB - Virtual size: 512B

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 248KB - Virtual size: 253KB

.rsrc
Size: 4KB - Virtual size: 512B