49edd3df6667652aeddb146acc20f0ca93db8aece9b05f84ba7514cc5cbee215

General

Target

49edd3df6667652aeddb146acc20f0ca93db8aece9b05f84ba7514cc5cbee215
Size

135KB
MD5

2bf5b8e8d89ea7524d105b1a8ca1cc10
SHA1

a3a1b5403fa9df60c754f04980d71f18ca775a15
SHA256

49edd3df6667652aeddb146acc20f0ca93db8aece9b05f84ba7514cc5cbee215
SHA512

e131a29c4b7200a83978dc6d6b14defe1dc900a7008e1ffbafee37bff3d59fe62a28df52a4172c7e9f6ee8c38dd3fbf3697331e10bca42731878330403cb3bec
SSDEEP

3072:9Q0kMPr2ENjyAYNVMkGC5InhE+jIB+FB9H8wvrvHiDQipJZOPnnN5wJVW:alArDRDk2E+EIFB9H8WuDQInOE

Score

N/A

Malware Config

Signatures

Files

49edd3df6667652aeddb146acc20f0ca93db8aece9b05f84ba7514cc5cbee215
.exe windows x86

91d57720a119d8b9f099deec4276c60b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
GetPrivateProfileSectionA
CreateFileA
GetTempFileNameA
CreateWaitableTimerW
GlobalFlags
GlobalFree
OpenFileMappingA
GlobalGetAtomNameW
SetThreadPriorityBoost
GetFullPathNameA
FindResourceA
InterlockedDecrement
SetCalendarInfoA
FindResourceExW
WriteProfileSectionW
FatalExit
SetThreadAffinityMask
TransactNamedPipe
SetFilePointer
WaitNamedPipeA
GetTimeZoneInformation
FormatMessageA
FindResourceExA
GlobalAddAtomA
GetModuleHandleA
SuspendThread
TlsAlloc
OutputDebugStringW
GetStdHandle
GetVolumeNameForVolumeMountPointA
GetProcessAffinityMask
GetUserDefaultUILanguage
CloseHandle
GetThreadSelectorEntry

user32

DdeSetQualityOfService
CharPrevExA
EnumDesktopsA
SetMessageQueue

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 471B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

91d57720a119d8b9f099deec4276c60b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 471B

.data Size: 45KB - Virtual size: 45KB

.rsrc Size: 1KB - Virtual size: 1KB

.text Size: - Virtual size: 160KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 471B

.data
Size: 45KB - Virtual size: 45KB

.rsrc
Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 160KB