ed7b6fc9812d619f82e5b445857ed375269aa4a77807b8cf69275619e811a852

General

Target

ed7b6fc9812d619f82e5b445857ed375269aa4a77807b8cf69275619e811a852
Size

836KB
MD5

be79d9e4504de1220f282b7dae7fb501
SHA1

4749afefbdc9bc4027332db6be70a3d17f403a98
SHA256

ed7b6fc9812d619f82e5b445857ed375269aa4a77807b8cf69275619e811a852
SHA512

fb7e4dacd61fe33e842dcd93f343f18a056889dda47c35584f0635c2a8ca182c2e65d56aa3b651f9d8b504aca60553a212e03fc1799a3d0011117d38ffe610d4
SSDEEP

12288:Zn5jm4Xq+Ry71px3y6k8AUK3fHJSJnjGHKR/zzfQ1WdsKxhtav/yd:nmqzRN6k83KxgKHIvQ81H4/

Score

N/A

Malware Config

Signatures

Files

ed7b6fc9812d619f82e5b445857ed375269aa4a77807b8cf69275619e811a852
.exe windows x86

26307eb33bf753129f398f6a4c8a1c4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
ReadFile
GetProcAddress
LoadLibraryA
ResumeThread
VirtualProtect
VirtualFree
GetTickCount
WaitForSingleObject
CloseHandle
InterlockedExchange
WriteConsoleA
VirtualQuery
GetSystemInfo
GetLocaleInfoA
GetModuleHandleA
RtlUnwind
DeleteFileA
HeapSize
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetLastError
WriteFile
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
SetFilePointer
FlushFileBuffers
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
RaiseException
SetStdHandle
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
CreateFileA

ws2_32

send

msacm32

acmFormatDetailsA

avifil32

AVIFileInit

msvfw32

ICSendMessage

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 776KB - Virtual size: 779KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26307eb33bf753129f398f6a4c8a1c4b

Headers

File Characteristics

Imports

kernel32

ws2_32

msacm32

avifil32

msvfw32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 776KB - Virtual size: 779KB

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 776KB - Virtual size: 779KB

.rsrc
Size: 16KB - Virtual size: 15KB