d4fbfb1f17e47d751aceade3bf505e67bf5743d376a0c9c46c0d790a1363c866

General

Target

d4fbfb1f17e47d751aceade3bf505e67bf5743d376a0c9c46c0d790a1363c866
Size

320KB
MD5

52993652a57af30d0d730bbcb909c8c0
SHA1

fec608ff8370e328bf67f85aca54000f41178e37
SHA256

d4fbfb1f17e47d751aceade3bf505e67bf5743d376a0c9c46c0d790a1363c866
SHA512

99269fdc5cee5711afb6775e278697e108799b05f33a9a6d30849e06d49c82c8408fe56b7ce7a2b67cda662f881b0079d8f9ae64a12ba74fe1da1a3d66ff70ea
SSDEEP

6144:xGWjVOCWQf1olYDMaplGBxuz5RjrE2THaI3WVTMU8/28lf8:xGeV2Qf1IaPGBoLvE2SVTMUim

Score

N/A

Malware Config

Signatures

Files

d4fbfb1f17e47d751aceade3bf505e67bf5743d376a0c9c46c0d790a1363c866
.exe windows x86

e6069e05086570615824bc2dfeda0cd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA

kernel32

TlsSetValue
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
MultiByteToWideChar
HeapSize
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6069e05086570615824bc2dfeda0cd1

Headers

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 260KB - Virtual size: 256KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 260KB - Virtual size: 256KB