b6d995731e6edd416feeb7ed5a62d0fb58aae6253ae8d7b376bb27cadd1b0ed5

General

Target

b6d995731e6edd416feeb7ed5a62d0fb58aae6253ae8d7b376bb27cadd1b0ed5
Size

152KB
MD5

0c8d361e277c5a0703df562b7eade060
SHA1

22741dd051c0288756d4ef369336f77f1aca5b24
SHA256

b6d995731e6edd416feeb7ed5a62d0fb58aae6253ae8d7b376bb27cadd1b0ed5
SHA512

0510743a00fec1975f5d509a00e5c2c0eeff8aed0cc1a2116c474986b495a4fd0562778d7f300732bc7075950d76111a99c98b3e40a0595ce9d2f6fdff4c5e5e
SSDEEP

768:EI++xIc+2KjwjTs/hwoVRy1IA88Gh0o2l6DbyDoc2tGOmVKYFNaFHupTYfxkXls7:e1c+QjBoVRVQoc09YqFdK24U

Score

N/A

Malware Config

Signatures

Files

b6d995731e6edd416feeb7ed5a62d0fb58aae6253ae8d7b376bb27cadd1b0ed5
.exe windows x86

a824301cacb0024ec5a480b1ffbd626c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
OpenEventA
CloseHandle
Sleep
VirtualAlloc
OpenMutexW
ReadFile
GetTickCount
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetProcAddress
GetLastError
RemoveDirectoryA
FindClose
GetModuleHandleW
PulseEvent
TerminateThread
FlushFileBuffers
GetStringTypeW
SuspendThread
InterlockedExchange
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
SetFilePointer
SetStdHandle
MultiByteToWideChar
LCMapStringA

user32

LoadBitmapW
ShowWindow
EnableWindow
LoadCursorA

gdi32

CreatePen
SelectObject
CreateBitmap

advapi32

CryptAcquireContextW
OpenServiceW

winmm

auxSetVolume

avifil32

AVIFileAddRef

winscard

SCardForgetReaderW

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a824301cacb0024ec5a480b1ffbd626c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

winmm

avifil32

winscard

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 28KB - Virtual size: 29KB

.rsrc Size: 92KB - Virtual size: 88KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 28KB - Virtual size: 29KB

.rsrc
Size: 92KB - Virtual size: 88KB