b21b2b091ded02f9a0bca6097a431fef7b9873ed23c5a040eff0676bebd14b75

Sharing

Copy URL Twitter E-mail

General

Target

b21b2b091ded02f9a0bca6097a431fef7b9873ed23c5a040eff0676bebd14b75
Size

144KB
MD5

20b9f1394d3607cb963b671f9362baf0
SHA1

0bbf8984f8dabefc3582410911871779e248bd33
SHA256

b21b2b091ded02f9a0bca6097a431fef7b9873ed23c5a040eff0676bebd14b75
SHA512

3890dd05c2e09f87b2ac50d94cd669f8fbcb76e0d7f82a3ab6898358be1e1a15698f537f869d7389fe19643d439ba5a225eb087601f7a9523469e7bfa4424a5a
SSDEEP

3072:c0kFcks9bD7P3LiqwvtDQ2DqKE2UK0sQ1EhaDr:rPks9bPU1FPEBh6hA

Score

N/A

Malware Config

Signatures

Files

b21b2b091ded02f9a0bca6097a431fef7b9873ed23c5a040eff0676bebd14b75
.exe windows x86

222bf717bdcb10aa90225e49e64bdad4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
InterlockedDecrement
GetCurrentProcessId
GetStartupInfoA
GetModuleHandleA
QueryPerformanceCounter
GetStartupInfoW
GetCurrentProcess
CompareFileTime
GetCurrentThreadId
InterlockedIncrement
VirtualAlloc
GetStringTypeW
GetModuleHandleW
DeleteCriticalSection
HeapAlloc
GetSystemInfo
WideCharToMultiByte
FindFirstFileW
LoadLibraryW
SetFilePointer
HeapSize
WaitForSingleObjectEx
CreateEventW
WriteFile
MultiByteToWideChar
FreeEnvironmentStringsW
GetModuleFileNameA
SetHandleCount
SetEndOfFile
CreateFileA
TryEnterCriticalSection
EnterCriticalSection
TlsFree
ExitProcess
HeapCreate
LoadResource
GetVersionExW
GetOEMCP
GlobalAlloc
FindClose
FormatMessageW
HeapDestroy
ReadFile
FreeLibrary
lstrlenW
GetEnvironmentStringsW
GetFileAttributesW
InterlockedCompareExchange
LocalFree
HeapFree
WaitForSingleObject
LeaveCriticalSection
LCMapStringW
GetCommandLineW
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringA
GetStringTypeA
IsValidCodePage
GetVersionExA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLastError
GetCommandLineA
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA

user32

GetSystemMetrics

msi

ord50

shell32

SHFileOperationW

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

222bf717bdcb10aa90225e49e64bdad4

Headers

File Characteristics

Imports

kernel32

user32

msi

shell32

Sections

.text Size: 88KB - Virtual size: 87KB

.data Size: 48KB - Virtual size: 91KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 88KB - Virtual size: 87KB

.data
Size: 48KB - Virtual size: 91KB

.reloc
Size: 4KB - Virtual size: 3KB