ba5c799b1f47395ff294d89e8e439d2131158eab15127a91a63308b09dfaf7d2

General

Target

ba5c799b1f47395ff294d89e8e439d2131158eab15127a91a63308b09dfaf7d2
Size

156KB
MD5

08851c8963d5df5e0ee5cf0141c57b86
SHA1

5f4282054bfa6336b35f1977b680ea6354b632b5
SHA256

ba5c799b1f47395ff294d89e8e439d2131158eab15127a91a63308b09dfaf7d2
SHA512

3b416e724d5d88c559578468c8c9f14374d0806912039632af43309bbd82cfd1ba9ac0759ff7fdc3f851bd9e0ade9fad42d2faa603107ca2f325a28d6bc5a6f9
SSDEEP

3072:9Dt90E1tGsx9VbhH0GkrxZIPXqnZnzlY61KeDp1qC7JVDtR2OpOw2Y7pM:9t9r1k29VV3PXgZ2e1zvpOw2Y7S

Score

N/A

Malware Config

Signatures

Files

ba5c799b1f47395ff294d89e8e439d2131158eab15127a91a63308b09dfaf7d2
.exe windows x86

c8a5f46dbd74c71ab71509a2fe5a916c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateThread
DuplicateHandle
ExitProcess
FindAtomA
FindResourceA
GetAtomNameA
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetProcAddress
GetThreadContext
LoadResource
LockResource
ResumeThread
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
VirtualProtect
VirtualQuery

msvcrt

_close
_open
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
atoi
fopen
fread
free
fseek
ftell
malloc
memcpy
memset
perror
rewind
signal
strtok

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8a5f46dbd74c71ab71509a2fe5a916c

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 1024B - Virtual size: 576B

.bss Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 460B

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 1024B - Virtual size: 576B

.bss
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 460B