6ba50ab1b9bb62ba767ecadabbc0b82f2be856f84ab3804b3f8b80055a22926c

General

Target

6ba50ab1b9bb62ba767ecadabbc0b82f2be856f84ab3804b3f8b80055a22926c
Size

150KB
MD5

0d61f064340b892b8f789527c57a3b0b
SHA1

9e4178d1608572d750f3b36932f9bf7473ef648e
SHA256

6ba50ab1b9bb62ba767ecadabbc0b82f2be856f84ab3804b3f8b80055a22926c
SHA512

240d65e32c34e412c77931c3d226b958b1898e5b0fe7c261f5a0b5407543cdc34fb1018dc93f6982d9d4be8aff64d825226384ea75ded3cf7d71aae361c54349
SSDEEP

3072:aw9+dHN6JCRLemOumCKoWUGYBWKw4Q5KCaRvKM3VVEv:aw94t6JQLe8mfg8KBC7IKU

Score

N/A

Malware Config

Signatures

Files

6ba50ab1b9bb62ba767ecadabbc0b82f2be856f84ab3804b3f8b80055a22926c
.exe windows x86

2ec4a2bd3c1b5c70f09aefdaea1fc93e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
memcpy
fopen
fseek
fclose
_CIsqrt
_CIlog
floor
ceil
_CIpow
ftell
fread
malloc
free
fabs
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
LoadLibraryA
GetProcAddress
HeapReAlloc
TlsAlloc
GetVersionExA
GetLogicalDriveStringsA

user32

ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
DestroyIcon
FillRect

gdi32

GetStockObject
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel

wsock32

closesocket
WSACleanup
WSAStartup

winmm

timeEndPeriod
mciSendCommandA

Sections

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ta
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

src
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ec4a2bd3c1b5c70f09aefdaea1fc93e

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

wsock32

winmm

Sections

.code Size: 8KB - Virtual size: 7KB

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 512B - Virtual size: 296B

.ta Size: 2KB - Virtual size: 3KB

src Size: 123KB - Virtual size: 122KB

.code
Size: 8KB - Virtual size: 7KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 512B - Virtual size: 296B

.ta
Size: 2KB - Virtual size: 3KB

src
Size: 123KB - Virtual size: 122KB