a9af14fbd3fd730de75536c46cc8a96d8e3564f9f674b8ebb83fafdc9df5fb8b

General

Target

a9af14fbd3fd730de75536c46cc8a96d8e3564f9f674b8ebb83fafdc9df5fb8b
Size

88KB
MD5

4589318a4d8df07da42f3be884b9126c
SHA1

78f0dd1c7da4a7c254dd74e249350fc244001afa
SHA256

a9af14fbd3fd730de75536c46cc8a96d8e3564f9f674b8ebb83fafdc9df5fb8b
SHA512

bc878059c00c89457725b89841e886f2ce4925ce252351dc3d4df593ae1b229b1dfc5e4a9c22206d00dabd4da831bc31a0fd2098c357760f606a958774ea69d8
SSDEEP

1536:8e4gv2k5oNDIqUk7Wa3q7OsxPoW9qsn2gQAQ77DyV0Wvr2T9W:8IV5oCqj7Wa3PSPoW9AAW7GZiTA

Score

N/A

Malware Config

Signatures

Files

a9af14fbd3fd730de75536c46cc8a96d8e3564f9f674b8ebb83fafdc9df5fb8b
.exe windows x86

4b41d1d784b3809734e148131580776a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
CreateFileA
GetModuleFileNameA
CloseHandle
WriteFile
ExitProcess
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateProcessW
CreateProcessA
CreateFileW
WinExec
CopyFileA
GetWindowsDirectoryA
MoveFileExA
MoveFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStringTypeW
GetOEMCP
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP

user32

ShowWindow
GetForegroundWindow

shlwapi

PathFileExistsA
PathRemoveFileSpecA
PathAppendA
PathFindFileNameA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b41d1d784b3809734e148131580776a

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 56KB - Virtual size: 55KB