8cf48f3ed0dfbf716fb9e52b81ddfad9e08a6390d7c24f51b120599321582e43

General

Target

8cf48f3ed0dfbf716fb9e52b81ddfad9e08a6390d7c24f51b120599321582e43
Size

268KB
MD5

dfa582e6c41781bec06f5c3905bc37ea
SHA1

b55980ae81932ba279898be5bc079ef986b3aa1a
SHA256

8cf48f3ed0dfbf716fb9e52b81ddfad9e08a6390d7c24f51b120599321582e43
SHA512

6b2a615907964e3be88dc02e1e04cb8bb1a8ec68bfd8377c6dc6deadfdc7a0e052092e23f8082e7dc78501d86b9052e373b4502fbb60ab3ec09983d0f16a6a20
SSDEEP

3072:Umv1sy21aGZb0ZCNp44xgJFAr+aEIjoZrWiwbfhPArptcFZSmd2wzPSV:U+KaGZb0ZCYJFZIjoZrwrYcFZSNwz6V

Score

N/A

Malware Config

Signatures

Files

8cf48f3ed0dfbf716fb9e52b81ddfad9e08a6390d7c24f51b120599321582e43
.exe windows x86

5baad7123d29065b77ce84930cf80e3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetTickCount
GetPriorityClass
GetCurrentProcessId
GetCurrentThread
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetVersionExA
GetModuleHandleW
lstrlenA
VirtualAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
GetStringTypeW

shell32

SHOpenFolderAndSelectItems

secur32

CompleteAuthToken

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 232KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5baad7123d29065b77ce84930cf80e3c

Headers

File Characteristics

Imports

kernel32

shell32

secur32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 232KB - Virtual size: 268KB

BSS Size: 4KB - Virtual size: 988B

.rsrc Size: 4KB - Virtual size: 800B

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 232KB - Virtual size: 268KB

BSS
Size: 4KB - Virtual size: 988B

.rsrc
Size: 4KB - Virtual size: 800B