62a90a007ddfd51aef858c24ecb22a6975a476880b492bbafc71c1928f6b2b11

General

Target

62a90a007ddfd51aef858c24ecb22a6975a476880b492bbafc71c1928f6b2b11
Size

332KB
MD5

01b29a8969d04da36824bf521a64dd30
SHA1

56e94c5cfc3fcb5101a803ca83cc2a07332cda83
SHA256

62a90a007ddfd51aef858c24ecb22a6975a476880b492bbafc71c1928f6b2b11
SHA512

af479c20c82155d9c1154aa8d6f558408223a0aae99b44183c7e538d911f9f3d672661941f892773763fcb2f25a4d1a19e0e735ad7e4ff2f5b85f1b04227c4aa
SSDEEP

6144:whhlefdzjGS46niimpWAJnJUV0BBi26sTDOUuR9sTDO5ujurx7:wef346niimwAbBBd6EDo9EDUrx

Score

N/A

Malware Config

Signatures

Files

62a90a007ddfd51aef858c24ecb22a6975a476880b492bbafc71c1928f6b2b11
.exe windows x86

48a87e5a61e0d5110a346f450e65716e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

tbtbx32

ord106

tbtype32

ord177
ord171
ord175
ord173
ord176
ord273
ord274
ord179
ord187
ord188
ord62
ord63
ord34
ord67
ord66
ord249
ord119
ord153
ord180
ord212
ord184

kernel32

CreateDirectoryA
DeleteFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
CloseHandle
GetLastError
TerminateProcess
GetCurrentProcess
GetFileAttributesA
CompareStringA
GetLocalTime
LoadLibraryA
GetOEMCP
GetACP
CreateFileA
SetStdHandle
SetConsoleCtrlHandler
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
MoveFileA
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
GetSystemTime
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
ReadFile
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FlushFileBuffers
GetProcAddress
GetModuleHandleA
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSDR1.1
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

48a87e5a61e0d5110a346f450e65716e

Headers

File Characteristics

Imports

tbtbx32

tbtype32

kernel32

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 224KB - Virtual size: 347KB

.rsrc Size: 12KB - Virtual size: 8KB

BSDR1.1 Size: 12KB - Virtual size: 10KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 224KB - Virtual size: 347KB

.rsrc
Size: 12KB - Virtual size: 8KB

BSDR1.1
Size: 12KB - Virtual size: 10KB