4331aecc8f18a17240b6bf40cdf27f91066a0d6055193fc343d02f01fd2b6dd5

General

Target

4331aecc8f18a17240b6bf40cdf27f91066a0d6055193fc343d02f01fd2b6dd5
Size

252KB
MD5

771b4d1db6f33e915aac90cf58b0da01
SHA1

fbcbb3a589b256417b7fdae9bce71c20ec648ff1
SHA256

4331aecc8f18a17240b6bf40cdf27f91066a0d6055193fc343d02f01fd2b6dd5
SHA512

c384d827e15026deb0cb75848da61fc6558d425c2367f8e85251f9ea738a964c3662bc904cb1a4a54310c44e527ff3b01aea4ac0a6d54f850211d324145bd9f0
SSDEEP

6144:p1TlTjLEGvAEVGnc3Qkp18kZmO3dNA33mm:p1pL6Eonc3+aA2m

Score

N/A

Malware Config

Signatures

Files

4331aecc8f18a17240b6bf40cdf27f91066a0d6055193fc343d02f01fd2b6dd5
.exe windows x86

8b59817ce9302d951696d04c04ca2831

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateInstance
CLSIDFromString
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize

dbghelp

MiniDumpWriteDump

wintrust

WinVerifyTrust

kernel32

SetHandleCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetFilePointer
SetStdHandle
CloseHandle
GetLocaleInfoW
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
GetProfileStringA
VirtualProtect
GetWindowsDirectoryA
FlushFileBuffers
CreateEventA
LocalFree
LocalAlloc
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b59817ce9302d951696d04c04ca2831

Headers

File Characteristics

Imports

ole32

dbghelp

wintrust

kernel32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 116KB - Virtual size: 564KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 116KB - Virtual size: 564KB