d0c38b9780da9ef58892951e78af266d9d8f829511fdde927d162f814ba69f16

General

Target

d0c38b9780da9ef58892951e78af266d9d8f829511fdde927d162f814ba69f16
Size

208KB
MD5

a65b6403b08569cfedd07ea18d38a799
SHA1

82e4c177a38d74cbe5100fbd12f2295cdb7bdfcc
SHA256

d0c38b9780da9ef58892951e78af266d9d8f829511fdde927d162f814ba69f16
SHA512

dd7528137690ae499d19511783c98d3f3b31fc1dcc0a66d11b635308a3c1d2f0bc53544fb757cd563f8490ddc1ebf2d7d42ed18c18928d6e5fc602b543abbac1
SSDEEP

3072:nS5qlEswkfPIleINBBl94LFdDB9RK8LgPw1rW2q7ixQ:nSCGeWtWRK8LgSa2q7iW

Score

N/A

Malware Config

Signatures

Files

d0c38b9780da9ef58892951e78af266d9d8f829511fdde927d162f814ba69f16
.exe windows x86

51ef0c056750bd1784d1b9bfd86c4da5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
LoadLibraryA
VirtualProtect
GetProcAddress
GetModuleHandleA
GetExitCodeThread
FlushFileBuffers
VirtualQuery
CreateEventA
OpenMutexA
VirtualLock
Sleep
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemInfo

user32

GetFocus
IsWindowEnabled
LoadCursorA

winscard

SCardForgetCardTypeA

psapi

EnumProcessModules

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51ef0c056750bd1784d1b9bfd86c4da5

Headers

File Characteristics

Imports

kernel32

user32

winscard

psapi

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 60KB - Virtual size: 58KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 120KB - Virtual size: 184KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 60KB - Virtual size: 58KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 120KB - Virtual size: 184KB