9437e427bfaf06446b326138e18ce9831b644cce11da14062242a5c9f395c531

General

Target

9437e427bfaf06446b326138e18ce9831b644cce11da14062242a5c9f395c531
Size

184KB
MD5

9b8c1708482dc1f09fdaf41c5e6266a5
SHA1

a10c98b943d7e796b9c9f20e495abe55f98ccd71
SHA256

9437e427bfaf06446b326138e18ce9831b644cce11da14062242a5c9f395c531
SHA512

a11cd9bd8d91af38db6be0d988d0aad95b56965acc740ae37bd1c08bf5e713e084bd99de00961757df933813d39d5ec325248603aa5bd6a89a21e03de3e78732
SSDEEP

3072:AtVXBklqs16c5WgVf2hYPSn6iw1E5rRockWXN+68m0jmzCfuWzNKqXK:AtrI52kS6P0rRGWXNB83C2uWa

Score

N/A

Malware Config

Signatures

Files

9437e427bfaf06446b326138e18ce9831b644cce11da14062242a5c9f395c531
.exe windows x86

1f2e5e60fadc02322d7cfe348cb917ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
LoadLibraryA
IsBadCodePtr
VirtualAlloc
VirtualProtect
GetProcAddress
GetModuleHandleA
VirtualLock
GetEnvironmentStrings
GetLastError
GetCommandLineA
GetCurrentProcess
GetTickCount
VirtualQuery
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
SetEvent
GetLocaleInfoA
LocalLock
GetACP
HeapReAlloc
GetSystemInfo
HeapAlloc
GetStartupInfoA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate

user32

EndPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
BeginPaint
GetDesktopWindow
GetClientRect
GetDC
IsIconic
GetCursorPos
SetCursorPos
GetWindowRect
GetTopWindow
ShowWindow

gdi32

CreatePatternBrush
FloodFill

shell32

DuplicateIcon

msvfw32

DrawDibEnd
DrawDibStop

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f2e5e60fadc02322d7cfe348cb917ac

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msvfw32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 144KB - Virtual size: 229KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 144KB - Virtual size: 229KB