1ca1c85a67e6a57a350efe1ed4a36e464e11637f405d2efeb40eab3bec89bf56

General

Target

1ca1c85a67e6a57a350efe1ed4a36e464e11637f405d2efeb40eab3bec89bf56
Size

388KB
MD5

714bec80ba81ab7fbebdda486e535cb4
SHA1

cd825d31af2dc1930fb0b4947e06a09c0a243001
SHA256

1ca1c85a67e6a57a350efe1ed4a36e464e11637f405d2efeb40eab3bec89bf56
SHA512

6a74665272329933a6cbc0f85d33c598a08d8641325297a58b897db30e28ca8b006c089a034177b07244ea5b502497707dd0132608cb356c1b48f0bbe3eb815c
SSDEEP

6144:z8j2Eo3EZ2OyRa15COIiOLmA9eQ4cMriRWFr5NL9zxBiToA:zFEowiTLqQ4cGpr5x9za

Score

N/A

Malware Config

Signatures

Files

1ca1c85a67e6a57a350efe1ed4a36e464e11637f405d2efeb40eab3bec89bf56
.exe windows x86

3e56b72cf67f0423246a47fdc0f81a01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lz32

LZStart
LZInit
LZDone
CopyLZFile
LZCopy

kernel32

SetStdHandle
FlushFileBuffers
SetSystemTimeAdjustment
GetSystemDirectoryA
OpenMutexA
CloseHandle
WideCharToMultiByte
HeapFree
GetLastError
GetFileType
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetEndOfFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryA
GetACP
GetOEMCP
InterlockedExchange
GetLocaleInfoW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e56b72cf67f0423246a47fdc0f81a01

Headers

File Characteristics

Imports

lz32

kernel32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 146KB - Virtual size: 145KB

.data Size: 126KB - Virtual size: 1.1MB

.rsrc Size: 46KB - Virtual size: 45KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 146KB - Virtual size: 145KB

.data
Size: 126KB - Virtual size: 1.1MB

.rsrc
Size: 46KB - Virtual size: 45KB