94733b8d02ce90cbaad0249888e8508a05a55b49866c9a94c1abea6cd0b65cda

Sharing

Copy URL Twitter E-mail

General

Target

94733b8d02ce90cbaad0249888e8508a05a55b49866c9a94c1abea6cd0b65cda
Size

112KB
MD5

28711563c3b0e115712763fece922ba2
SHA1

f238260bb92194ee14f0e0f2d39277be082eaad7
SHA256

94733b8d02ce90cbaad0249888e8508a05a55b49866c9a94c1abea6cd0b65cda
SHA512

d0e5fa1c65200885ca32c1fca6f032fb73231bccc28aeeac3df6d54fbcc8893e7869eccc8ccc1fc4eac1db07f10a9ae0669d7fe702e2c414d98362702950d283
SSDEEP

1536:EEMSk9GXQtFg3gs7cvR2m7/CW7jc3XG+YMw9CjpllbfktMvr3wm:wSk0X2IDcp2m75jgX7rjpl+8r3b

Score

N/A

Malware Config

Signatures

Files

94733b8d02ce90cbaad0249888e8508a05a55b49866c9a94c1abea6cd0b65cda
.exe windows x86

b190cf301283b4ff7b1bdbe603d373b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
InterlockedIncrement
ExitProcess
VirtualFree
GetModuleHandleA
Sleep
GetProcAddress
InterlockedExchange
GetTickCount
SetEvent
SetFirmwareEnvironmentVariableW
CreateMutexA
VirtualAlloc
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
VirtualQuery

user32

EnableWindow
MessageBoxA
PostMessageA
LoadImageW
ShowWindow
PeekMessageA
DestroyWindow
SendMessageA

winmm

midiStreamStop

Exports

Exports

?EnumWindowsProc@@YIHKK@Z

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VDXE
Size: 4KB - Virtual size: 85B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.INIT2
Size: 4KB - Virtual size: 522B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b190cf301283b4ff7b1bdbe603d373b7

Headers

File Characteristics

Imports

kernel32

user32

winmm

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.VDXE Size: 4KB - Virtual size: 85B

.INIT2 Size: 4KB - Virtual size: 522B

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 1KB

.vdata Size: 8KB - Virtual size: 6KB

.rsrc Size: 64KB - Virtual size: 60KB

.text
Size: 16KB - Virtual size: 15KB

.VDXE
Size: 4KB - Virtual size: 85B

.INIT2
Size: 4KB - Virtual size: 522B

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 1KB

.vdata
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 64KB - Virtual size: 60KB