a8f18a14d7fb3b2948a6e6cda1331c3c0b64a4895fe8f08b24476559c5e72df5

General

Target

a8f18a14d7fb3b2948a6e6cda1331c3c0b64a4895fe8f08b24476559c5e72df5
Size

88KB
MD5

530a430b2c3453d407c4936b41616f59
SHA1

4af3c870d3d3cff709c8494bdf7a63c49e2c0c53
SHA256

a8f18a14d7fb3b2948a6e6cda1331c3c0b64a4895fe8f08b24476559c5e72df5
SHA512

f5cc40a537dc29212f9fe493431c456d1d4fcf296213c92854f5cc8edceaba2bf9f6ea3666395de3603891b942d03678ceab0cba4b5856d9575597faa1353910
SSDEEP

768:Dfjl/iU2jEtIYrNve8/j3DAPkhuyZFlwo1tNPazM4VMS54I0Cd5U45r6rAKA/0Xf:Dfiw5e8ckVnl3tNPajiI045U45t0hJ

Score

N/A

Malware Config

Signatures

Files

a8f18a14d7fb3b2948a6e6cda1331c3c0b64a4895fe8f08b24476559c5e72df5
.exe windows x86

2eb9bdd601dca58287cd36db0304b26b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
CloseHandle
WaitForSingleObject
CreateProcessA
GetVersionExA
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InitializeCriticalSection
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

GetMessageA
SetTimer
MessageBoxExA
KillTimer

advapi32

CheckTokenMembership
AllocateAndInitializeSid
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
FreeSid

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qqdidct
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2eb9bdd601dca58287cd36db0304b26b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 40KB - Virtual size: 40KB

qqdidct Size: - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 40KB - Virtual size: 40KB

qqdidct
Size: - Virtual size: 4KB