0491879485d60953cd294c47c07818c4d3132f90a13631d1a874a9a8d6199f59

General

Target

0491879485d60953cd294c47c07818c4d3132f90a13631d1a874a9a8d6199f59
Size

213KB
MD5

08017a0eed631dd8bde5c797e26c3240
SHA1

34a3582720df5ba491d4900549a0abc86cb33f4f
SHA256

0491879485d60953cd294c47c07818c4d3132f90a13631d1a874a9a8d6199f59
SHA512

b2d17e2123207a42908c38657d344b2bb9b7f2caacab26e5095e52f1ac9c9e5a7be07adcfb2bb37ff5c4494fbcc38c8aedc32b1e8ef90dea2444c36c8723b20e
SSDEEP

3072:qNQ6XHwoPX1GBJTTm+Lp1/38/42qCm4DIRZEPIbuJRo544k2RxIzPlI:qNhXlP1GB91Lpp8/4/ChkQrTK3Iz9

Score

N/A

Malware Config

Signatures

Files

0491879485d60953cd294c47c07818c4d3132f90a13631d1a874a9a8d6199f59
.exe windows x86

f23b4db47b45aed441ddef17b32f0236

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

ExitProcess
WaitForSingleObject
CreateThread
lstrcatA
lstrcmpA
GetLastError
CreateMutexA
lstrcpyA
GetModuleFileNameA
lstrlenA
LoadLibraryA
GetCommandLineA
WriteProcessMemory
lstrlenW
GetModuleFileNameW
Sleep
ReadProcessMemory
GetModuleHandleA
GetCurrentProcess
IsDebuggerPresent
lstrcmpiA
GetProcAddress
ReadConsoleA
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetProcessHeap
WriteConsoleA

user32

SetWindowLongA
SetTimer
KillTimer
CreateWindowExA
GetSysColor
GetMessageA
SetFocus
DefWindowProcA
MessageBoxA
MessageBoxW

gdi32

DeleteObject
CreateDCA

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f23b4db47b45aed441ddef17b32f0236

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

ole32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 5KB

Size: 61KB - Virtual size: 61KB

.rsrc Size: 135KB - Virtual size: 212KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 5KB

.rsrc
Size: 135KB - Virtual size: 212KB