b19362c332abbd5cda95f115cde853b3e0bc01b526e628ad7dffc7bc3d466a9a

Sharing

Copy URL Twitter E-mail

General

Target

b19362c332abbd5cda95f115cde853b3e0bc01b526e628ad7dffc7bc3d466a9a
Size

420KB
MD5

ac69eaf7b5310693d7bc86daf68ed0ed
SHA1

6419d01b2fd2d60e22489ce59c86a59221ee0728
SHA256

b19362c332abbd5cda95f115cde853b3e0bc01b526e628ad7dffc7bc3d466a9a
SHA512

b7bad537cc3452ca8a57dbc7023b46951b411e525495dcb721817f340a57e87f0f8924ab8c40c6b2528b7624bdda7b62cfb2ca198205b6fe5743b3431233a879
SSDEEP

6144:alSGfY4DJEeFIQajn45EZ3iy4AMdU4RHXaxT3NRQT2DkE:a+6mQaj45EZAAnkHKxT3NRY2Dn

Score

N/A

Malware Config

Signatures

Files

b19362c332abbd5cda95f115cde853b3e0bc01b526e628ad7dffc7bc3d466a9a
.exe windows x86

840ac6874eb4cfb927fa9218f27eb984

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
GetLastError
FindAtomA
Sleep
SetLastError
VirtualLock
TerminateThread
DeleteTimerQueue
VirtualQuery
CreateFileA
VirtualAlloc
GetTickCount
GetProcAddress
GetSystemInfo
VirtualProtect
RtlUnwind
SetEvent
GetModuleHandleA
GetLocaleInfoA
IsBadCodePtr
TerminateProcess
GetStringTypeW
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA

user32

InSendMessage
LoadIconA
IsWindowUnicode
PostMessageA
UpdateWindow
LoadBitmapA
DestroyWindow
LoadCursorA

gdi32

DeleteObject

psapi

GetModuleBaseNameA

msvfw32

ICClose

avifil32

EditStreamPaste

winmm

midiConnect

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

840ac6874eb4cfb927fa9218f27eb984

Headers

File Characteristics

Imports

kernel32

user32

gdi32

psapi

msvfw32

avifil32

winmm

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 112KB - Virtual size: 108KB

.data Size: 60KB - Virtual size: 535KB

.rsrc Size: 224KB - Virtual size: 221KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 112KB - Virtual size: 108KB

.data
Size: 60KB - Virtual size: 535KB

.rsrc
Size: 224KB - Virtual size: 221KB