af8d5a0a528ef4ae920d2c1e46e659ab320d5d1c56cd0025a185c4fffb0bd6be

General

Target

af8d5a0a528ef4ae920d2c1e46e659ab320d5d1c56cd0025a185c4fffb0bd6be
Size

152KB
MD5

9a6933f2ded927d5b9cebdd16170c786
SHA1

f65466902e7bbfc3831f8015f8e593609d8b0266
SHA256

af8d5a0a528ef4ae920d2c1e46e659ab320d5d1c56cd0025a185c4fffb0bd6be
SHA512

d36fbdc7cb3141be73d5d364308f017c57a2dc27984307dbbaaa09f2633322fbea8579d3a4a47f8cb7c2f205bcda1b116bf128adc6ab68f0cf9f3d9b1be8269c
SSDEEP

3072:VO4IDzkTcJfgJaDj3o4jjGRmaD/K3vUFOFuPSSB:E4kGanGRmaD/KCjB

Score

N/A

Malware Config

Signatures

Files

af8d5a0a528ef4ae920d2c1e46e659ab320d5d1c56cd0025a185c4fffb0bd6be
.exe windows x86

1e24b20d7e1d4325370dce8a41f3f142

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CloseHandle
CreateFileA
InterlockedExchange
Sleep
CreateEventA
GetProcAddress
LoadLibraryA
GetLastError
VirtualAlloc
PulseEvent
OpenMutexA
ExitProcess
GetModuleHandleA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
RtlUnwind
GetStringTypeW
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetEndOfFile
ReadFile
SetFilePointer
SetStdHandle
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
VirtualQuery

user32

ShowWindow
SendInput
FindWindowA
LoadIconA
LoadBitmapA

msvfw32

DrawDibClose

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e24b20d7e1d4325370dce8a41f3f142

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 7KB

.vdata Size: 68KB - Virtual size: 64KB

.rsrc Size: 44KB - Virtual size: 40KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 7KB

.vdata
Size: 68KB - Virtual size: 64KB

.rsrc
Size: 44KB - Virtual size: 40KB