b622948c406b186aa98faf966b6170692a65602bc25e9459e90942b1e0901765

General

Target

b622948c406b186aa98faf966b6170692a65602bc25e9459e90942b1e0901765
Size

250KB
MD5

a82baed399b986a4a7a7aefa83788f50
SHA1

fe73050b022d8312c353f281a5818b269b1994ca
SHA256

b622948c406b186aa98faf966b6170692a65602bc25e9459e90942b1e0901765
SHA512

2403c66a9fcb1363a27720b1a43e970185fb308daafb69d7d6208920cd0529e936d4f8ddd32c1a781e21b679a340781bc9301613b6d79b303dc27cffe522af48
SSDEEP

3072:/OHJtDuiepiq4yZUnnObN4KJdbQIOjC+xn69cEQIinRYRRXcwLCq6lM8ylv9XK:2nuie8oOObNOIOJn6q/SzLC7vylv96

Score

N/A

Malware Config

Signatures

Files

b622948c406b186aa98faf966b6170692a65602bc25e9459e90942b1e0901765
.exe windows x86

3cda5978ffbcecd2410a38a120f75f74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CreateProcessA
GetCommandLineA
LoadLibraryA
GetProcessHeap
GetTickCount
LockResource
SizeofResource
LoadResource
FindResourceA
GetLastError
HeapReAlloc
HeapAlloc
HeapFree
GetVersionExA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
Sleep
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cda5978ffbcecd2410a38a120f75f74

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 201KB - Virtual size: 200KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 201KB - Virtual size: 200KB