4fd29b5d74657f1b916921b9342da697a120ddba3e733857d6760977aeeeb04f

General

Target

4fd29b5d74657f1b916921b9342da697a120ddba3e733857d6760977aeeeb04f
Size

189KB
MD5

630525793383296a43fb44d6929032ad
SHA1

51bef7e8b230470800f41d8fc345f37676e773aa
SHA256

4fd29b5d74657f1b916921b9342da697a120ddba3e733857d6760977aeeeb04f
SHA512

447556aeaba367acf7c3190927226f078dc110e6df71148f0211134854c0444e0f619bae2764d0a8cdfeba3b58d42fedfcd55e4c37164b0c0fa3946286626717
SSDEEP

1536:ZkE2XnK4L68OJEPN3j4IdwCEpl/5JYKkpG5y6q6CEK4hiXONoOZkD:P2KhJGN3jrHYjC9ky6qZ4hhan

Score

N/A

Malware Config

Signatures

Files

4fd29b5d74657f1b916921b9342da697a120ddba3e733857d6760977aeeeb04f
.exe windows x86

c781fbc21f0deec4cce073cc3b8ca9e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperBuffA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

pbvm80

ord137

Sections

AUTO
Size: 16KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 168KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c781fbc21f0deec4cce073cc3b8ca9e5

Headers

File Characteristics

Imports

user32

kernel32

pbvm80

Sections

AUTO Size: 16KB - Virtual size:

.idata Size: 1KB - Virtual size:

DGROUP Size: 3KB - Virtual size:

.bss Size: 4KB - Virtual size:

.reloc Size: 1KB - Virtual size:

.rsrc Size: 166KB - Virtual size: 168KB

AUTO
Size: 16KB - Virtual size:

.idata
Size: 1KB - Virtual size:

DGROUP
Size: 3KB - Virtual size:

.bss
Size: 4KB - Virtual size:

.reloc
Size: 1KB - Virtual size:

.rsrc
Size: 166KB - Virtual size: 168KB