ab5ea04c2dab87c09556dd171e382f544c1e0faf63fb9aa5e3fed38501829ec4

General

Target

ab5ea04c2dab87c09556dd171e382f544c1e0faf63fb9aa5e3fed38501829ec4
Size

142KB
MD5

4fc33df8b585830d2f41837dbd590281
SHA1

b9f63fd405c137ffc88106bbf31c991e7fcfec85
SHA256

ab5ea04c2dab87c09556dd171e382f544c1e0faf63fb9aa5e3fed38501829ec4
SHA512

a9b605677249fd1789008a432b2eeeb9af216825307b40e46ca2711a6c787a2627bede7ecc117b1652184e68ff4171af77800779b5431d3713ed11a2b67fda26
SSDEEP

3072:wsq4DOrid8jlI2jPGMEl8Gif8DnhiBk9zO5wqZrO:bd862j+8f870BkMS+O

Score

N/A

Malware Config

Signatures

Files

ab5ea04c2dab87c09556dd171e382f544c1e0faf63fb9aa5e3fed38501829ec4
.exe windows x86

273cf6c485715487b2cbfeb39cd6b83f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
MultiByteToWideChar
CreateProcessW
CreateMutexW
LoadResource
GetProcAddress
LoadLibraryW
GetModuleFileNameW
LCMapStringA
FindResourceW
Sleep
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringW

user32

GetKeyboardType

gdi32

UnrealizeObject

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

273cf6c485715487b2cbfeb39cd6b83f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 92KB - Virtual size: 88KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 92KB - Virtual size: 88KB