e16c3af84531ac27834c595e0e42ea8932f2f17292173bd4cc5fa06274681410

General

Target

e16c3af84531ac27834c595e0e42ea8932f2f17292173bd4cc5fa06274681410
Size

184KB
MD5

a7b5eb7b8e15e9aa42d7fe8f205cba4a
SHA1

901ab1b66b615b5876db412d2d9f87372f4f1bd9
SHA256

e16c3af84531ac27834c595e0e42ea8932f2f17292173bd4cc5fa06274681410
SHA512

c24781ca29aaffec87f236839824107a2c85dc0e21c22aa9865b1a7d0808a9891f39d661e3ba6ae658d88692ca532d167655526b9869459e77ecd23ccd348359
SSDEEP

3072:YVqRloqF8VE2c7860ptV5JhbEEc8nC2Z3j0MO3cLvqC8PrcPOLvV:Y4F8Vx60px/A4C2Z3jDvqlqOLvV

Score

N/A

Malware Config

Signatures

Files

e16c3af84531ac27834c595e0e42ea8932f2f17292173bd4cc5fa06274681410
.exe windows x86

b62bdb1950cf11ad7f24728d4212b40c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetProcessHeap
WaitForSingleObject
VirtualFree
LoadLibraryA
Sleep
VirtualAlloc
VirtualProtect
GetProcAddress
GetModuleHandleA
EnterCriticalSection
PulseEvent
SetEvent
HeapFree
GetTickCount
GetPriorityClass
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetOEMCP
GetLastError
GetACP
HeapReAlloc
HeapAlloc
GetSystemInfo
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate

user32

EndPaint
PostQuitMessage
DefWindowProcA
ShowWindow
BeginPaint
IsChild
CloseWindow
GetTopWindow
GetDesktopWindow
GetDC
IsIconic
GetCursorPos
SetCursorPos
GetWindowRect
LoadCursorA

gdi32

SelectObject

psapi

GetProcessMemoryInfo

msvfw32

DrawDibStop
DrawDibEnd

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b62bdb1950cf11ad7f24728d4212b40c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

psapi

msvfw32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 144KB - Virtual size: 229KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 144KB - Virtual size: 229KB