f1f91979af5dd7fba53e1e6bab243ad6b5a16e099fa6e621110d6e0f2fb7e336

General

Target

f1f91979af5dd7fba53e1e6bab243ad6b5a16e099fa6e621110d6e0f2fb7e336
Size

566KB
MD5

0d4c8efe475f4033d98d77fc602bf155
SHA1

1564ffd53c5ee2d66647a10d547533abdf5822fb
SHA256

f1f91979af5dd7fba53e1e6bab243ad6b5a16e099fa6e621110d6e0f2fb7e336
SHA512

93c77c6831de3fc4c01b7492f4224da791d91d3e43ceb5a9be32bdb72a6b2f494cebb45cd269a49794e73b93261ff5a8a141fab08663258d1557f33bccecccd2
SSDEEP

6144:NCytcbalOX5ZyEWwRnJNGn84AgI8rlzM2YsCkbZRiY1V3pzlb91mzUr:HtjO/51a8VgIwzM2jCkbzP1xPGzo

Score

N/A

Malware Config

Signatures

Files

f1f91979af5dd7fba53e1e6bab243ad6b5a16e099fa6e621110d6e0f2fb7e336
.exe windows x86

52f148a34c863d7f1962acd05d9c398e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageA
SendMessageA
TranslateMessage
ShowWindow

winmm

joyGetDevCapsA

kernel32

TlsSetValue
WriteConsoleW
GetConsoleOutputCP
SetEvent
GetTickCount
VirtualFreeEx
Sleep
GetEnvironmentVariableA
GetLastError
GetProcAddress
VirtualAlloc
VirtualAllocEx
CloseHandle
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapReAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameA
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LoadLibraryA
CreateFileA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
HeapSize
SetFilePointer
SetStdHandle
SetEndOfFile
GetProcessHeap
WriteConsoleA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52f148a34c863d7f1962acd05d9c398e

Headers

DLL Characteristics

File Characteristics

Imports

user32

winmm

kernel32

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 305KB - Virtual size: 304KB

.data Size: 4KB - Virtual size: 634KB

.rsrc Size: 206KB - Virtual size: 206KB

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 305KB - Virtual size: 304KB

.data
Size: 4KB - Virtual size: 634KB

.rsrc
Size: 206KB - Virtual size: 206KB