bb8e26917d1f16512f6f4c69610f9bf13575e07d1d2f192f6548e62efa3942fc

General

Target

bb8e26917d1f16512f6f4c69610f9bf13575e07d1d2f192f6548e62efa3942fc
Size

128KB
MD5

e91913971eeb9911cc33160eee102243
SHA1

7b2ffa94a06d73b5b34fc4cce80c4b9b8adf93ed
SHA256

bb8e26917d1f16512f6f4c69610f9bf13575e07d1d2f192f6548e62efa3942fc
SHA512

4e1af25a6a6d0ca1bf54f1d7331caeb27509af9ede612a43bf03d16400d13d9e11c2c56efaa9409202d83566b72c330431443baa848c827669e9164e40b07414
SSDEEP

1536:Gyf98R96UTEC2knCYtDCkW/AABZOR4xMiZjx/Xz38Lxq4LVmaZA0MKHT:G936o5/tWkW/9iT4FL38Lxq4L1C07T

Score

N/A

Malware Config

Signatures

Files

bb8e26917d1f16512f6f4c69610f9bf13575e07d1d2f192f6548e62efa3942fc
.exe windows x86

4e19e1c42fbb823ccaa3a706b531097a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winhttp

WinHttpOpen
WinHttpOpenRequest

kernel32

ExitProcess
GetFileSizeEx
ReadFile
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateFileA
SetHandleCount
HeapAlloc
GetLastError
HeapFree
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
InitializeCriticalSection
Sleep
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

gdi32

GdiComment

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e19e1c42fbb823ccaa3a706b531097a

Headers

File Characteristics

Imports

winhttp

kernel32

gdi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 80KB - Virtual size: 83KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 80KB - Virtual size: 83KB

.rsrc
Size: 4KB - Virtual size: 1KB