49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047

General

Target

49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047
Size

156KB
MD5

229dc1ade1394e2b787f65dc1f79ef74
SHA1

5af441c0754dfcef4fb1a613de1f8361319193ad
SHA256

49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047
SHA512

49c7b0e138a9a3cba16afa01a8532de13026bc385eb0f14ca2291c8229af62914a0ad976e5913c83b110c4a965a60017326b3f13e40bb1882852e34f558ee430
SSDEEP

3072:9zt90EpbBtcxXhIlldYt2xxaKUc7Ocxc236SHtraya6Y/YqY8t2Y7IS:Vt9rLtcxXOz40n36S9ayaJ/VY8t2Y7t

Score

N/A

Malware Config

Signatures

Files

49c5c4e81f1633f73365172314ed0455fd0bb6fbbafc5fd53960306979284047
.exe windows x86

c8a5f46dbd74c71ab71509a2fe5a916c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateThread
DuplicateHandle
ExitProcess
FindAtomA
FindResourceA
GetAtomNameA
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetThreadContext
LoadResource
LockResource
ResumeThread
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
VirtualProtect
VirtualQuery

msvcrt

_close
_open
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
atoi
fopen
fread
free
fseek
ftell
malloc
memcpy
memset
perror
rewind
signal
strtok

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8a5f46dbd74c71ab71509a2fe5a916c

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 1024B - Virtual size: 576B

.bss Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 460B

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 1024B - Virtual size: 576B

.bss
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 460B