f26ee61c94b9135202c6f15d5fd4361c2aa78152f8326b3e069db1aa568dd660

General

Target

f26ee61c94b9135202c6f15d5fd4361c2aa78152f8326b3e069db1aa568dd660
Size

315KB
MD5

14afa6722b9113de52319c5091781e54
SHA1

229fe3cbcfa1a4412b1f44fa68a7a7d6228c978b
SHA256

f26ee61c94b9135202c6f15d5fd4361c2aa78152f8326b3e069db1aa568dd660
SHA512

e2bd3f35a57ac19b9f34fe947127ee6e918ba68ac4ef8a7ecf66f4764156c020b57fd4664da6669d03633f0cbf3fc3840c8d56ac7e39a603a1d9006e7b4b7e63
SSDEEP

6144:xyjNYqcjQCjNuHo43+XrXGhflnNbDg0EZJLpCUdvsUP+K9dnwE:6Yq2QNy78xdEZJVBmUPzdwE

Score

N/A

Malware Config

Signatures

Files

f26ee61c94b9135202c6f15d5fd4361c2aa78152f8326b3e069db1aa568dd660
.exe windows x86

0ee19e290d7c6ae8a78bbed78b4c6eeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0ee19e290d7c6ae8a78bbed78b4c6eeb

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 184KB - Virtual size: 180KB

.data Size: 84KB - Virtual size: 85KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 184KB - Virtual size: 180KB

.data
Size: 84KB - Virtual size: 85KB