5097a1af8ec52e13df7ff4a2f43b332bd33a9ca6296c6f97af19db649ae9b904

General

Target

5097a1af8ec52e13df7ff4a2f43b332bd33a9ca6296c6f97af19db649ae9b904
Size

206KB
MD5

a39d91d834ed2badca50b2513c7d16e0
SHA1

afa8c742954fed2939594569259973d8968efcea
SHA256

5097a1af8ec52e13df7ff4a2f43b332bd33a9ca6296c6f97af19db649ae9b904
SHA512

995c17426ae53b70a3c9dff7a8115f92f56013f1c1fdd5820963da64dd54f275f7245b173867a849cd0d21736ba6b1a2cbca0d4aebabd2579f30ef32570b2ee7
SSDEEP

6144:l5VAoJ+xNOiqxIHEHB4tLp/i2hjQdMjFH:lHAhoxDBgvhjwWR

Score

N/A

Malware Config

Signatures

Files

5097a1af8ec52e13df7ff4a2f43b332bd33a9ca6296c6f97af19db649ae9b904
.exe windows x86

e39e3121f7def27e5d0885a0a9c43195

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
memcpy
fopen
fseek
fclose
_CIsqrt
_CIlog
floor
ceil
_CIpow
ftell
fread
fabs
malloc
free
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
LoadLibraryA
GetProcAddress
GetProfileStringA
HeapReAlloc
TlsAlloc
GetVersionExA
GetLogicalDriveStringsA

user32

ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
DestroyIcon
FillRect

gdi32

CreateDCA
GetStockObject
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

winmm

timeEndPeriod
mciSendCommandA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ta
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

src
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mtext
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e39e3121f7def27e5d0885a0a9c43195

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

winmm

Sections

.code Size: 8KB - Virtual size: 7KB

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 512B - Virtual size: 368B

.ta Size: 2KB - Virtual size: 3KB

src Size: 121KB - Virtual size: 121KB

.mtext Size: 60KB - Virtual size: 60KB

.code
Size: 8KB - Virtual size: 7KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 512B - Virtual size: 368B

.ta
Size: 2KB - Virtual size: 3KB

src
Size: 121KB - Virtual size: 121KB

.mtext
Size: 60KB - Virtual size: 60KB