5b53a554b6bd7d56758d35d056791a5c1b089176b597d1511592af86cf00397d

General

Target

5b53a554b6bd7d56758d35d056791a5c1b089176b597d1511592af86cf00397d
Size

228KB
MD5

89364f7e0ac645b1582e7aef74208080
SHA1

4a66618c3f31662fd57b89646c12a3d98e20ffe5
SHA256

5b53a554b6bd7d56758d35d056791a5c1b089176b597d1511592af86cf00397d
SHA512

463e78b6ff8e540199ef4503e30619623288d4e1c236ab2000ab8e436d83024fefa605264bc3239878025c50051d08ee9e47ab84d7a6f4649f0731bf5e2b32ce
SSDEEP

3072:p1LZaDK6rxcfztrO58alROza0fubxv4TNAa1BGP1bYnkqMpfJdNqFxSCxBSOyh6p:/tRVt65QzWbxvMt+1MjMRJ7q2HO6Yz9Z

Score

N/A

Malware Config

Signatures

Files

5b53a554b6bd7d56758d35d056791a5c1b089176b597d1511592af86cf00397d
.exe windows x86

258b5f72c2a572aa2846fec84cdfbb56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
CreateProcessA
FlushFileBuffers
HeapSize
ExitProcess
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetFilePointer
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
CloseHandle

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

258b5f72c2a572aa2846fec84cdfbb56

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB

.vmp0
Size: 192KB - Virtual size: 1.3MB