8e252d219de3dda4886a52d7d9c1acfac288ddf7fe706bc59192a7dc08edebf3

General

Target

8e252d219de3dda4886a52d7d9c1acfac288ddf7fe706bc59192a7dc08edebf3
Size

116KB
MD5

df78a46bddfd2e07d8b26fb8881bf6f9
SHA1

bb0cfdb9a0fed7f753da88218ff233f3af79d98b
SHA256

8e252d219de3dda4886a52d7d9c1acfac288ddf7fe706bc59192a7dc08edebf3
SHA512

c3214c4bba7941c128598ea4942d20314f8a7409d8eab85efe49784f29136c042c3decb7e84e18264e42b048d6100651d470c933ed67806c316ac2c85586c075
SSDEEP

1536:gFg1Imk6Ifi5pBvhR5LJy8029fh4/bEgN4aM0WUCP3KQLpsUTcRyS:gpcI2hvYd/QgNM08SApRc8S

Score

N/A

Malware Config

Signatures

Files

8e252d219de3dda4886a52d7d9c1acfac288ddf7fe706bc59192a7dc08edebf3
.exe windows x86

42e93b2af185b6b17c595006d7db9181

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetTickCount
GetSystemDirectoryA
VirtualAlloc
GetModuleHandleA
GetProcAddress
Sleep
CreateEventA
InterlockedExchange
GetCurrentDirectoryA
GetLastError
VirtualProtect
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RtlUnwind
SetFilePointer
ReadFile
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

LoadIconA

winmm

midiInClose
auxOutMessage

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 4KB - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42e93b2af185b6b17c595006d7db9181

Headers

File Characteristics

Imports

kernel32

user32

winmm

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 4KB - Virtual size: 8KB

.vdata Size: 4KB - Virtual size: 3B

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 4KB - Virtual size: 8KB

.vdata
Size: 4KB - Virtual size: 3B

.rsrc
Size: 16KB - Virtual size: 15KB