8d1efc67c8743b27b6a8fe9b3b0a72546191429d8a9cdb29a5d3944547998744

General

Target

8d1efc67c8743b27b6a8fe9b3b0a72546191429d8a9cdb29a5d3944547998744
Size

256KB
MD5

dce9285c39d971fd2f15562387e30aee
SHA1

1884b427735d862afddc8a530969723db12e2585
SHA256

8d1efc67c8743b27b6a8fe9b3b0a72546191429d8a9cdb29a5d3944547998744
SHA512

e40b6862d6b3a4c93057b55c8ef7210681526277cadef4f666e6c390caec3496ed52c67db46d6ce9081bdfd763df2b8a324b44cd48198894b328750754b24ac6
SSDEEP

6144:lde1u10uBMPFmRBnC9R7pXjWbPWDcX4IBmnP5fqYv3FqFMvo:lM69OoRNCRWbPWoX4I8hic3FMMvo

Score

N/A

Malware Config

Signatures

Files

8d1efc67c8743b27b6a8fe9b3b0a72546191429d8a9cdb29a5d3944547998744
.exe windows x86

bb1b985bb0dfc939320b1f62d02c6aa3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA

kernel32

WideCharToMultiByte
GetVersion
SetEndOfFile
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
ReadFile
LCMapStringW
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
RtlUnwind
GetEnvironmentStringsW
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
SetConsoleCtrlHandler
GetFullPathNameA
GetCommandLineA
LoadLibraryA
SetEnvironmentVariableA
MultiByteToWideChar
LCMapStringA
GetEnvironmentStrings
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCurrentDirectoryA
SetCurrentDirectoryA
GetProcAddress
WriteFile
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
GetACP
GetOEMCP
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

DdeInitializeA
DdeCreateStringHandleA
DdeConnectList
DdeQueryNextServer
DdeClientTransaction
DdeDisconnectList
DdeNameService
DdeFreeStringHandle
DdeUninitialize

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb1b985bb0dfc939320b1f62d02c6aa3

Headers

File Characteristics

Imports

version

kernel32

user32

Sections

.text Size: 200KB - Virtual size: 197KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 40KB - Virtual size: 461KB

.rsrc Size: 4KB - Virtual size: 960B

.text
Size: 200KB - Virtual size: 197KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 40KB - Virtual size: 461KB

.rsrc
Size: 4KB - Virtual size: 960B