b27ae2512479f34d05895666452cd91b9a47488512d40e076c9d1917faa0364d

General

Target

b27ae2512479f34d05895666452cd91b9a47488512d40e076c9d1917faa0364d
Size

106KB
MD5

8379d147321dd6026097eafa3b65038c
SHA1

0169eaa2fed3c9aeeaa624d8a3691bbff03f38f9
SHA256

b27ae2512479f34d05895666452cd91b9a47488512d40e076c9d1917faa0364d
SHA512

8ed107808b03efe336d3323bfe2dd89acc644ad4bb948158d973b06e6be203069d7f3a3f885285017e065277007ebc7c332818135f2b29f6ad52a63ff8089896
SSDEEP

1536:ggjW/wravravrOrixXss0hjgBinclDspON2DaOPgDW:2CCCOr6x0j9cOpm2Daw

Score

N/A

Malware Config

Signatures

Files

b27ae2512479f34d05895666452cd91b9a47488512d40e076c9d1917faa0364d
.exe windows x86

ca620ef6858a9f4d1b31e197acd5ab2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetCurrentThread
GetTempFileNameA
DeleteFileW
EnumCalendarInfoA
SetCurrentDirectoryA
FileTimeToDosDateTime
OpenProcess
VirtualFree
LoadResource
GetTempPathW
SizeofResource
GetModuleHandleA
GetModuleFileNameA
LocalFileTimeToFileTime
SetErrorMode
WideCharToMultiByte
GetTimeZoneInformation
RtlMoveMemory
GetProcAddress
GlobalHandle
GetFileType
CompareStringA
VirtualQuery
Sleep
UnhandledExceptionFilter
DeleteFileA
GetModuleFileNameW
GetTempPathA
lstrlenW
VirtualProtect
GetVersionExA
GetThreadLocale

msvcrt

__getmainargs
_initterm
__p__fmode
_except_handler3
_XcptFilter
__p__commode
_exit
_controlfp
_adjust_fdiv
__p___initenv
tan
__set_app_type

Sections

.text
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Oniokid
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca620ef6858a9f4d1b31e197acd5ab2d

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 1024B - Virtual size: 578B

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 38KB

.rsrc Size: 32KB - Virtual size: 32KB

Oniokid Size: 8KB - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 100B

.text
Size: 1024B - Virtual size: 578B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 38KB

.rsrc
Size: 32KB - Virtual size: 32KB

Oniokid
Size: 8KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 100B