b51bb9818bddab8c0b3bcc68f0e8f87adfece461d884d2f476c866515c6a18a9

General

Target

b51bb9818bddab8c0b3bcc68f0e8f87adfece461d884d2f476c866515c6a18a9
Size

416KB
MD5

d49ae10c25f8c1f9563a92740927bc67
SHA1

dd903c19b91841357a22aaa9f8b062f7d305aa64
SHA256

b51bb9818bddab8c0b3bcc68f0e8f87adfece461d884d2f476c866515c6a18a9
SHA512

7b366efe7df9e74a57ed6e3f4e9b7fb5758d688ee2ad58b2102d0356129ec112b8aedb3577e5ad862d5e3dcf0c272738e3b75943e3c6d9b9e54817b492089d78
SSDEEP

12288:FpiwgNu3T2Ix/Iq3roDHm8Bm8bkVLjb4nq+rGV+JnQ:FpPgutl3rorc1Ljb4qv+JQ

Score

N/A

Malware Config

Signatures

Files

b51bb9818bddab8c0b3bcc68f0e8f87adfece461d884d2f476c866515c6a18a9
.exe windows x86

630ba3f230328502c7b185cf155672a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
VirtualFree
WriteFile
SetEvent
GetProcAddress
GetLastError
CreateThread
CloseHandle
lstrlenA
VirtualAllocEx
InterlockedIncrement
GetModuleHandleA
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
FlushFileBuffers

user32

ShowWindow
SendInput
EnableWindow
SetActiveWindow
LoadIconA

msacm32

acmFilterTagEnumW

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

630ba3f230328502c7b185cf155672a2

Headers

File Characteristics

Imports

kernel32

user32

msacm32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 212KB - Virtual size: 210KB

.data Size: 152KB - Virtual size: 154KB

.rsrc Size: 12KB - Virtual size: 394KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 212KB - Virtual size: 210KB

.data
Size: 152KB - Virtual size: 154KB

.rsrc
Size: 12KB - Virtual size: 394KB