b392bb8e83cff1180180b2ccfd60dc4c382af4eee27d29a1a5a5840c84c360aa

General

Target

b392bb8e83cff1180180b2ccfd60dc4c382af4eee27d29a1a5a5840c84c360aa
Size

160KB
MD5

8297018b8f41ed564be61d350ba41430
SHA1

1e05ed971051f836cc857da1d8130c6e386828a8
SHA256

b392bb8e83cff1180180b2ccfd60dc4c382af4eee27d29a1a5a5840c84c360aa
SHA512

36b1dd2739969eb8d8ddcaecd5254d14c7de5c26661307e5aeffbdfa4870a31d467825e4d2fb7184dd90519b95604783b8638be7c72b2c970ad4881f0e62a3ff
SSDEEP

1536:rZmeePbVe3e66xekDopn4IOdAgWnyJ21QAwMJGAzK56E6:rkzfk00nwAgWnyJ21QAPGA1E6

Score

N/A

Malware Config

Signatures

Files

b392bb8e83cff1180180b2ccfd60dc4c382af4eee27d29a1a5a5840c84c360aa
.exe windows x86

e9129bd64b21431402acabe0749ae276

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winhttp

WinHttpGetDefaultProxyConfiguration
WinHttpCreateUrl

kernel32

GetTickCount
ExitProcess
GetExitCodeProcess
ReadFile
GetModuleHandleA
GetAtomNameA
GetFileSize
LocalAlloc
CreateFileA
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
GetCurrentProcessId
GetModuleFileNameA
GetSystemTimeAsFileTime
InterlockedExchange
Sleep

user32

LoadIconA
LoadCursorA
RegisterClassA
FindWindowA
ShowWindow
UpdateWindow
PostMessageA

gdi32

AbortDoc
CreateFontA

msvcr80

_amsg_exit
free
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
malloc
__getmainargs

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9129bd64b21431402acabe0749ae276

Headers

File Characteristics

Imports

winhttp

kernel32

user32

gdi32

msvcr80

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 76KB - Virtual size: 78KB

.rsrc Size: 72KB - Virtual size: 70KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 76KB - Virtual size: 78KB

.rsrc
Size: 72KB - Virtual size: 70KB