6413b6f8e944bc2955a593dc82935cd0ec97fce61955250c76001f2856f92ba6

General

Target

6413b6f8e944bc2955a593dc82935cd0ec97fce61955250c76001f2856f92ba6
Size

572KB
MD5

377bbbe61e57e46608b5595c7594a400
SHA1

a2b13361a9aed713ebb4699fc8a558dbaa45ef38
SHA256

6413b6f8e944bc2955a593dc82935cd0ec97fce61955250c76001f2856f92ba6
SHA512

9f9728d129a4c48500ee0add4cca4224dd08a12a0660ecf6598925c7a0a05b17774fc45ce5eb646f35eff386be7171177e8a9d37ab2db81da2314d527af025d2
SSDEEP

6144:buLSEMAHqZIhKZpCsUZO2/o/2AnZMr/grzKk0MREtsj+gvNtN8L8oZfCydh6BRi1:buk2cZl2A/2ii4BjD1vbIorQH6om8T

Score

N/A

Malware Config

Signatures

Files

6413b6f8e944bc2955a593dc82935cd0ec97fce61955250c76001f2856f92ba6
.exe windows x86

5101f2a789bf622ef14a381e6616825b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
RemoveDirectoryW
GetLocalTime
GetTickCount
CloseHandle
GetSystemInfo
VirtualProtect
LoadLibraryExW
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
SetFilePointer
FlushFileBuffers
GetProcAddress
GetLocaleInfoA
Sleep
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
VirtualQuery

user32

SetFocus
GetFocus
ReleaseDC

ole32

CoCreateInstance
CoInitialize

ws2_32

select

winmm

mciSendCommandA
mciGetDeviceIDA

avifil32

AVIStreamCreate
AVIMakeFileFromStreams

Exports

Exports

?_SFOCUESA@@YAXXZ

Sections

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 528KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5101f2a789bf622ef14a381e6616825b

Headers

File Characteristics

Imports

kernel32

user32

ole32

ws2_32

winmm

avifil32

Exports

Exports

Sections

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 16KB

.fdata Size: 528KB - Virtual size: 526KB

.rsrc Size: 20KB - Virtual size: 444KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 16KB

.fdata
Size: 528KB - Virtual size: 526KB

.rsrc
Size: 20KB - Virtual size: 444KB