a491904bc0a2c8fe2ba6aaef6f47d7dbe9d6cd579c7ccdebf92dc32fa334cdd6

General

Target

a491904bc0a2c8fe2ba6aaef6f47d7dbe9d6cd579c7ccdebf92dc32fa334cdd6
Size

313KB
MD5

e204f446d072d720d77d32bf5332c59c
SHA1

0574506a76e6ee98eeac0de533276fe32124ba27
SHA256

a491904bc0a2c8fe2ba6aaef6f47d7dbe9d6cd579c7ccdebf92dc32fa334cdd6
SHA512

0e3ddbe8ed9aef5a01e0c2ae928833df628a3e8b1826d506de345f4c3aeba75f1ee47f8f82efd0e4078627a5644ce873bc7b1427bce3e7ed773d39b9ea0ab8ba
SSDEEP

6144:lqoMeaEqC0geleBFE2njRpz1amDCcY7AYQbvpO:koMeahC02FE2njvHY07

Score

N/A

Malware Config

Signatures

Files

a491904bc0a2c8fe2ba6aaef6f47d7dbe9d6cd579c7ccdebf92dc32fa334cdd6
.exe windows x86

395a13b60b7bc9c714be2b5e6e9f1b61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

loadperf

InstallPerfDllW
UpdatePerfNameFilesW

kernel32

FreeEnvironmentStringsW
GetOEMCP
GetACP
GetSystemInfo
WritePrivateProfileStringW
VirtualProtect
GetLastError
CloseHandle
GetFileType
CreateFileA
GetModuleHandleA
GetStartupInfoW
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
ReadFile
SetFilePointer
MultiByteToWideChar
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetLocaleInfoA
GetCPInfo

Exports

Exports

Strongsit
itsea

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

395a13b60b7bc9c714be2b5e6e9f1b61

Headers

File Characteristics

Imports

loadperf

kernel32

Exports

Exports

Sections

.text Size: 146KB - Virtual size: 145KB

.rdata Size: 86KB - Virtual size: 86KB

.data Size: 78KB - Virtual size: 282KB

.rsrc Size: 1024B - Virtual size: 792B

.text
Size: 146KB - Virtual size: 145KB

.rdata
Size: 86KB - Virtual size: 86KB

.data
Size: 78KB - Virtual size: 282KB

.rsrc
Size: 1024B - Virtual size: 792B