639c687a35392623696ff79d7f8d35919fbd1240707e787b5bc5b035efcaba5d

Sharing

Copy URL

Twitter E-mail

General

Target

639c687a35392623696ff79d7f8d35919fbd1240707e787b5bc5b035efcaba5d
Size

424KB
MD5

9e76fc45e01464f800ed82ee21c24ab6
SHA1

02559ed78227f3569b1cc202ff37ef49c1448efe
SHA256

639c687a35392623696ff79d7f8d35919fbd1240707e787b5bc5b035efcaba5d
SHA512

6746fe9f1814eb2ff4149cff5a382899d6dd2ddebbef7c5e1bcb89a18bd8ccfc386cc64fff4d431f2b94b1d143471ad296eb8868106181e6e29801ae73bcc8f9
SSDEEP

12288:dkdGr8Vezlmi3lHbI2MBTad+sp/jK9wb+Ha:udGr8qlmi9bI2LdrpLo6O

Score

N/A

Malware Config

Signatures

Files

639c687a35392623696ff79d7f8d35919fbd1240707e787b5bc5b035efcaba5d
.exe windows x86

aa0ce1405bb179d09677083305f64dce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
WriteFile
SetEvent
GetTickCount
GetProcAddress
GetLastError
GetModuleHandleA
LoadLibraryA
InterlockedExchange
Sleep
lstrcatA
ResetEvent
CloseHandle
FlushFileBuffers
SetStdHandle
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
LCMapStringA
LCMapStringW

user32

LoadBitmapA
GetClientRect
PostMessageA
GetActiveWindow
GetFocus
ShowWindow

msvfw32

ICClose

winmm

joyGetPosEx
joyGetDevCapsA
joySetThreshold

Exports

Exports

?Loader@@YAKKK@Z

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa0ce1405bb179d09677083305f64dce

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

winmm

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 156KB - Virtual size: 152KB

.data Size: 204KB - Virtual size: 209KB

.tls Size: 8KB - Virtual size: 389KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 156KB - Virtual size: 152KB

.data
Size: 204KB - Virtual size: 209KB

.tls
Size: 8KB - Virtual size: 389KB

.rsrc
Size: 12KB - Virtual size: 9KB