2c635abb2be2cd77a2b62cac20b943b17d64480406c808f5555f49d8e4a7fc58

Sharing

Copy URL Twitter E-mail

General

Target

2c635abb2be2cd77a2b62cac20b943b17d64480406c808f5555f49d8e4a7fc58
Size

292KB
MD5

94664051d36d5a836a32e3187b854fbe
SHA1

622bdaab23651d9d1e9a5538880620a0ff4d13ee
SHA256

2c635abb2be2cd77a2b62cac20b943b17d64480406c808f5555f49d8e4a7fc58
SHA512

7051fadd20ca45ba75d62c482185681537d7c0ba56b0af4449ffcd8c7ba3fe2b8da8a85239a88f352ae3369eb35e9de3a62268bfd5e5539c4fcf77d3ce53c2b2
SSDEEP

6144:lLWIJ+Yxj0mU7lByxB50DAqF3oSjFt1DYAvXV:ljQYZOoB5OUOFtdYAv

Score

N/A

Malware Config

Signatures

Files

2c635abb2be2cd77a2b62cac20b943b17d64480406c808f5555f49d8e4a7fc58
.exe windows x86

c801448d43635c9b217e5faed63706ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetCommandLineA
GetEnvironmentStrings
GetACP
FreeLibrary
ResetEvent
CloseHandle
GetTickCount
GlobalAlloc
FileTimeToSystemTime
HeapAlloc
FlushFileBuffers
CreateFileA
LCMapStringW
ReadFile
SetFilePointer
HeapReAlloc
GetModuleFileNameW
GetLastError
LocalFree
ExitProcess
FindClose
CreateThread
GetFileType
GetOEMCP
DeleteCriticalSection
GetModuleHandleA
GetVersionExA
GetFileSizeEx
FindResourceW
SetHandleCount
GetVersionExW
InterlockedExchangeAdd
HeapDestroy
Sleep
LocalAlloc
RaiseException
FreeEnvironmentStringsA
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
FileTimeToLocalFileTime
GetCurrentProcess
InterlockedCompareExchange
CreateMutexW
GetFileSize
WaitForSingleObject
WriteFile
LeaveCriticalSection
TlsSetValue
EnterCriticalSection
TryEnterCriticalSection
CreateEventW
InterlockedExchange
FreeLibraryAndExitThread
SizeofResource
GetModuleHandleW
TlsGetValue
GetStdHandle
FormatMessageW
InterlockedIncrement
GetStringTypeW
SetStdHandle
WaitForMultipleObjects
GlobalFree
SetEnvironmentVariableA
CreateEventA
GetFileAttributesA
lstrlenA
GetEnvironmentStringsW
GetCurrentProcessId
GetCurrentThread
InterlockedDecrement
CompareStringA
GetLocaleInfoW
LoadLibraryA
GetCommandLineW
GetStartupInfoA
GetVersion
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
GetEnvironmentVariableA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InitializeCriticalSection
FatalAppExitA
GetCPInfo
IsBadWritePtr
GetProcAddress
LCMapStringA
GetStringTypeA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringW

shlwapi

PathGetDriveNumberA

iphlpapi

GetIfTable

Sections

.text
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c801448d43635c9b217e5faed63706ba

Headers

File Characteristics

Imports

kernel32

shlwapi

iphlpapi

Sections

.text Size: 252KB - Virtual size: 248KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 252KB - Virtual size: 248KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 10KB