f10baa4aaa153443c00184d9c089cfd9dc9d9f6697b5392b0ed4c04ddb23fa48

General

Target

f10baa4aaa153443c00184d9c089cfd9dc9d9f6697b5392b0ed4c04ddb23fa48
Size

660KB
MD5

17fdee1957a016d74fbd2ff8f72dd9de
SHA1

7efc39303e26b81721a64b2adcbab6ad80bb73ba
SHA256

f10baa4aaa153443c00184d9c089cfd9dc9d9f6697b5392b0ed4c04ddb23fa48
SHA512

0fdb7504077490868a60d9fde77230a2847285eae3a3b692e52514acaeb657b53975e9a06711627a04d2c2624698e2622db86a28af40ca6d60e26fc0cbec703e
SSDEEP

6144:RwgavYjGDA8urSyQHAvezvEnssy9vuZXxTPtJmnDnaj3aaxLBOI:RwgawjGsrUgvwxsKviT1JmnDnaj3aaaI

Score

N/A

Malware Config

Signatures

Files

f10baa4aaa153443c00184d9c089cfd9dc9d9f6697b5392b0ed4c04ddb23fa48
.exe windows x86

bb5bf0b5038077bf4c91dbd83e55f5bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
LCMapStringA
SetEndOfFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
HeapAlloc
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
CloseHandle
ReadFile
SetFilePointer
SetHandleCount
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LCMapStringW

shell32

ShellExecuteA

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb5bf0b5038077bf4c91dbd83e55f5bb

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 11KB

.idata Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 11KB

.idata
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB