d2e4427baa186fce82443c6334061ffca6344dd9e66cd7622a242a4356e5a1e4

General

Target

d2e4427baa186fce82443c6334061ffca6344dd9e66cd7622a242a4356e5a1e4
Size

584KB
MD5

d7855cb2e08dfd347beb9ef043563ac6
SHA1

59c0e7aa907f49a0e1ce943919cec772e6d8aafb
SHA256

d2e4427baa186fce82443c6334061ffca6344dd9e66cd7622a242a4356e5a1e4
SHA512

c0b075f899c3f9c0ab17eede6ef869a094e748c5c6290bca8cc2a1fee4bf027f73b73cfa0559a3c14f0b8bb3a3e932a925d2c8f7bb25f51ad53b0e6b3abac559
SSDEEP

12288:6X7Wt+2P0iU2sdOZRpl+QmzJ8SuFluK+YDIAn6R:8WtbTU2LZWtvuH7D/

Score

N/A

Malware Config

Signatures

Files

d2e4427baa186fce82443c6334061ffca6344dd9e66cd7622a242a4356e5a1e4
.exe windows x86

d07cdaa7b9ef97f1e3a3502a95b4b03e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ResetEvent
GetHandleInformation
OpenSemaphoreW
LoadLibraryW
ReadFile
CreateEventW
VirtualAlloc
GetProcAddress
GetModuleHandleW
HeapFree
TerminateProcess
FlushViewOfFile
SetThreadPriority
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetCPInfo
GetStringTypeW

user32

LoadCursorW
EnableWindow
SetWindowTextW
GetDC
ReleaseDC
CreateDesktopW

Exports

Exports

?EXS@@YAXXZ
?da@@3KA
?g_msg2529@@3PADA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d07cdaa7b9ef97f1e3a3502a95b4b03e

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 528KB - Virtual size: 528KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 528KB - Virtual size: 528KB

.rsrc
Size: 16KB - Virtual size: 12KB