891d2a23818597186a2dc2d772bb8a62d3799ff8b560d83820f75e18c521c252

General

Target

891d2a23818597186a2dc2d772bb8a62d3799ff8b560d83820f75e18c521c252
Size

456KB
MD5

f5697a2fbb445f5515538ea12a58bdfd
SHA1

c973907f26e30797891dbb7b1be5abc26f2dbcc5
SHA256

891d2a23818597186a2dc2d772bb8a62d3799ff8b560d83820f75e18c521c252
SHA512

6f0c819df14fbd35db3ab4ce24cf640c8313ef63d5c8a20d53cd26e33e7cd538e050a82df700e1156ba64aa26e79ae0cc69d5b03692a3a4c9023a9f1dd7447ba
SSDEEP

12288:P1ZP1CbsBV5tPVwL2jSSUFbHfzGKPNN+qfBF8SrLla0:T1CbsDPVHjMFLfzG4vCS9a0

Score

N/A

Malware Config

Signatures

Files

891d2a23818597186a2dc2d772bb8a62d3799ff8b560d83820f75e18c521c252
.exe windows x86

1857ef147674de2bf02332c57ba43147

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
SetComputerNameA
CreateDirectoryA
GetTickCount
FindClose
FindNextChangeNotification
SetLastError
ExitProcess
SetWaitableTimer
GetSystemTime
VirtualAlloc
Sleep
GetProcAddress
ResumeThread
SetStdHandle
LCMapStringW
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapAlloc
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetFilePointer
LCMapStringA
CloseHandle

user32

LoadStringA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 803KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1857ef147674de2bf02332c57ba43147

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 803KB

.rsrc Size: 400KB - Virtual size: 398KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 803KB

.rsrc
Size: 400KB - Virtual size: 398KB