1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a

General

Target

1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a
Size

108KB
MD5

2cad25e9724d93db64dc8a1f8ac8d835
SHA1

ba9a46e067d3f29841f5eeba702ad7fe754df959
SHA256

1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a
SHA512

31fb6b57476535e1c3f81973b741d314d345d4738474e56796e9380c53e5468fd4054a97e55a69714d8f4299860d45e6abdfcddf3c5219d31489ca0ff8660f7d
SSDEEP

1536:icANJeBAH+vavxwuz9lQWrVblaXZ6uF1KGl8n7J8jqmAloOtnrb7dMxlF5ZUI2RQ:ijNsa+7uEWrVblaXZfgG68dMo8Z2f

Score

N/A

Malware Config

Signatures

Files

1aec48aedd041c4c132763b9968179c099659477cb69edbc15d2fe96dfb5293a
.exe windows x86

a470079e745d16c2eaae59af6449f26b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
CloseHandle
GetSystemInfo
VirtualProtect
SetStdHandle
InterlockedExchange
Sleep
RaiseException
RtlUnwind
GetModuleHandleA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
InitializeCriticalSection
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
SetFilePointer
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

oleaut32

SysAllocString
SysStringLen
SysFreeString

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a470079e745d16c2eaae59af6449f26b

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 9KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 9KB

.rmnet
Size: 60KB - Virtual size: 60KB