a293ed74af0c215b5649ded4d56dd5200d36037cd8aaed5034226ec98f759e77

General

Target

a293ed74af0c215b5649ded4d56dd5200d36037cd8aaed5034226ec98f759e77
Size

407KB
MD5

5d4617af220f40842b2f2bf5c4857bda
SHA1

dded7a6a9f91d16cb9fb36ddc6e1a1fee9c899ee
SHA256

a293ed74af0c215b5649ded4d56dd5200d36037cd8aaed5034226ec98f759e77
SHA512

1491e2b5f45eba39442b99b318cb1321a1ce90ad0e866461eb9e22ffad05a82dc1eadf4293f9c25936944248903e41be29a1aa9ea465bf513392e3d4372fb8fa
SSDEEP

6144:BwjJyfZJGGIvGkExHpC6AlIidJ04wVwrYYbO8iTzP93PWTMoxm8xqQiiqy0nMJsT:qJeWL+7yI94wc++Jq9iNaWsyu9

Score

N/A

Malware Config

Signatures

Files

a293ed74af0c215b5649ded4d56dd5200d36037cd8aaed5034226ec98f759e77
.exe windows x86

bf7ecf720139ca1ece5856d7cdc1cf49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetModuleFileNameA
GetCurrentProcessId
CloseHandle
WaitForSingleObject
SetEvent
InterlockedIncrement
lstrlenA
CreateMutexA
lstrcatA
GetCurrentThreadId
ReleaseMutex
InterlockedDecrement
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
lstrcpyA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InterlockedExchange
VirtualQuery
ExitProcess
GetProcAddress
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
QueryPerformanceCounter
GetSystemInfo

advapi32

RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegOpenKeyA

ole32

StringFromGUID2
CoTaskMemFree
CoGetMarshalSizeMax
CoCreateGuid
CoReleaseMarshalData
CoMarshalInterface
CoUnmarshalInterface

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 336KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf7ecf720139ca1ece5856d7cdc1cf49

Headers

File Characteristics

Imports

kernel32

advapi32

ole32

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 336KB - Virtual size: 664KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 336KB - Virtual size: 664KB

.rsrc
Size: 1KB - Virtual size: 1KB