1d1253efb54719ea8704a8f74baca5c5fc0cbfd8a7a7d724f3831fee7381a007

General

Target

1d1253efb54719ea8704a8f74baca5c5fc0cbfd8a7a7d724f3831fee7381a007
Size

1.1MB
MD5

a2fb40bf31b31c67fc9e9a6c4a25a800
SHA1

f7deeb23c8e353695c527dd4e7ae92087f8a2a4e
SHA256

1d1253efb54719ea8704a8f74baca5c5fc0cbfd8a7a7d724f3831fee7381a007
SHA512

a1d3912ea1a13d3b352267e2417cdcc129858d590679310402c23e8764387953ffcce7cf19be213057ac198fe656b4b2aafd1d144ba469ff2fb3ba102d2a9a87
SSDEEP

12288:wotLLbH6PLJj/24ekXwujDNIi6sEVr+HPQcWL6HVJBvgQe9kxTMxc0Hv0frpA6Fv:wgrWndr4tsBgyMukkr0oX1zXCuZnJ

Score

N/A

Malware Config

Signatures

Files

1d1253efb54719ea8704a8f74baca5c5fc0cbfd8a7a7d724f3831fee7381a007
.exe windows x86

ab130b56a8f2e189831fe226fed5cc36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PeekNamedPipe
WaitForSingleObject
GetCurrentThread
TlsSetValue
SetSystemTimeAdjustment
GetExitCodeProcess
GetEnvironmentVariableA
ResetEvent
GetLocalTime
LoadLibraryA
OpenMutexA
GetDiskFreeSpaceA
FindFirstChangeNotificationA
CreateMutexA
VirtualProtect
GetFileTime
DuplicateHandle
TlsAlloc
GetCurrentProcessId
DeleteFileA
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024KB - Virtual size: 83.8MB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab130b56a8f2e189831fe226fed5cc36

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 8KB - Virtual size: 76KB

.rsrc Size: 4KB - Virtual size: 512B

.rsrc Size: 1024KB - Virtual size: 83.8MB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 8KB - Virtual size: 76KB

.rsrc
Size: 4KB - Virtual size: 512B

.rsrc
Size: 1024KB - Virtual size: 83.8MB