1813fb85063e77a0283ce957e261ced33f45e13d844ce928d1017be59a6590d0

General

Target

1813fb85063e77a0283ce957e261ced33f45e13d844ce928d1017be59a6590d0
Size

104KB
MD5

a1dae447256bd7d2f0957fd0583b85f0
SHA1

2d5984691e5eb8e70d59ab5f910fa27222a6020a
SHA256

1813fb85063e77a0283ce957e261ced33f45e13d844ce928d1017be59a6590d0
SHA512

0d92eb62207b642257005b6a498793a00a94078a9d40bb6d89df689a82ff94d3f88684ecb515d66ccdc3639c703c7694842834bd5a6b21e7314b8c0dbb19da94
SSDEEP

1536:QK//hG5LdBYP7AdFoQKny1N2mvPlUbiMYR75uD4h9BabPsUyZ/Uv2bzRKjbadmnL:Q0hAyAFoQKnYw62uM5EJ8f2bsjbyCC6

Score

N/A

Malware Config

Signatures

Files

1813fb85063e77a0283ce957e261ced33f45e13d844ce928d1017be59a6590d0
.exe windows x86

965180003ca9dad4f35cac73201335c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
Sleep
OpenProcess
GetModuleFileNameA
GetVersion
GetModuleHandleA
GlobalFree
ReadProcessMemory
GlobalAlloc
SetThreadContext
SuspendThread
ResumeThread
WriteProcessMemory
VirtualProtectEx
GetThreadContext
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
ExitProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetFilePointer
GetCommandLineA
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetLastError
FlushFileBuffers
SetStdHandle

user32

MessageBoxA

psapi

EnumProcessModules
GetModuleBaseNameA
EnumProcesses

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.prdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

965180003ca9dad4f35cac73201335c6

Headers

File Characteristics

Imports

kernel32

user32

psapi

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 11KB

.prdata Size: 72KB - Virtual size: 72KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 11KB

.prdata
Size: 72KB - Virtual size: 72KB