51899a3ab8f8fb3d311b362111339da0b1412e248dcae7d435d3585a6e7164e5

General

Target

51899a3ab8f8fb3d311b362111339da0b1412e248dcae7d435d3585a6e7164e5
Size

285KB
MD5

4d7315a24dc47f25b0a9d948a6b63e90
SHA1

961ec27617d8eea727ec58168e92bbe0e0f735b8
SHA256

51899a3ab8f8fb3d311b362111339da0b1412e248dcae7d435d3585a6e7164e5
SHA512

41d5e3429300cdad37611d0ff8fdedb56c7278846db5a99f1af8dc4965a597e74d93b80ce5d816c6edbcf98ce9c11e2cb1ed395cf77c3c4056dfaa5f35636db6
SSDEEP

6144:w+wCeCridLHIh9E1aFPPEOBsdIQNWM/RtnOm4mmOGUNdbSoo:heMFMaFPlW1Rt74m1Nd

Score

N/A

Malware Config

Signatures

Files

51899a3ab8f8fb3d311b362111339da0b1412e248dcae7d435d3585a6e7164e5
.exe windows x86

6f90fe8649fa828425268d0d37eaf70c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetSystemInfo
CreateEventA
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
WaitForMultipleObjects
WriteFileGather
WriteFile
GetLastError
ReadFileScatter
ReadFile
GetOverlappedResult
LeaveCriticalSection
EnterCriticalSection
GetFileType
CreateFileA
SetFilePointer
FlushFileBuffers
GetFileSize
SetEndOfFile
DeleteFileA
CopyFileA
CreateDirectoryA
FindNextFileA
FindFirstFileA
FindClose
GetFileAttributesA
GetDiskFreeSpaceExA
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
FreeLibrary
CreateSemaphoreA
ReleaseSemaphore
GetCurrentThreadId
Sleep
GetEnvironmentVariableA
GetCurrentDirectoryA
InterlockedIncrement
InterlockedDecrement
VirtualAlloc
VirtualFree
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
ExitProcess
TerminateProcess
GetCurrentProcess
CreateThread
TlsSetValue
TlsGetValue
ExitThread
HeapReAlloc
GetCommandLineA
GetVersion
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
WideCharToMultiByte
TlsAlloc
SetLastError
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStartupInfoA
RaiseException
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetCPInfo
SetStdHandle
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA

netapi32

Netbios

Exports

Exports

lic_read_hd_code
lic_read_is_activated
lic_read_lic_info

Sections

.text
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6f90fe8649fa828425268d0d37eaf70c

Headers

File Characteristics

Imports

kernel32

netapi32

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 218KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 49KB - Virtual size: 49KB

.text
Size: 220KB - Virtual size: 218KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 49KB - Virtual size: 49KB