20635f7a22e1278d236481f6bada0925ceb4604e534de81e7e1a0c2d24d6805c

General

Target

20635f7a22e1278d236481f6bada0925ceb4604e534de81e7e1a0c2d24d6805c
Size

4.5MB
MD5

fac8e7a3ffeabaa18ed5b372b743fbde
SHA1

7b4f322037d4f18e9d067ad5397aaf11214d5a2c
SHA256

20635f7a22e1278d236481f6bada0925ceb4604e534de81e7e1a0c2d24d6805c
SHA512

37563e2e9b78f7f177c7093fded3585e81e1f83f17e66ea21ed10973abee8e2ebfaec460f996ca48d30fd65dfb4dd29d806e2472f6f99cac5e8d90904872bf69
SSDEEP

49152:2YbIFLhKDswnOjU+ZpBiYbIFLhKDswnOjU+ZpBiYbIFLhKDswnOjU+ZpBiYbIFLI:BimdhqnA4OMz

Score

N/A

Malware Config

Signatures

Files

20635f7a22e1278d236481f6bada0925ceb4604e534de81e7e1a0c2d24d6805c
.exe windows x86

b04eddc557daa9f7a5113c0d63001603

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
Sleep
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
SetStdHandle
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW

user32

GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
PeekMessageA

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b04eddc557daa9f7a5113c0d63001603

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 144KB - Virtual size: 141KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 3.7MB - Virtual size: 3.7MB

.text
Size: 144KB - Virtual size: 141KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 3.7MB - Virtual size: 3.7MB