0ef1a8607ed51deee94b962ad58c5188f5a8340111452fbf7b257934eab85150

General

Target

0ef1a8607ed51deee94b962ad58c5188f5a8340111452fbf7b257934eab85150
Size

388KB
MD5

9f08e532fa823cffad8c066985e431fc
SHA1

ee3d3692e9eaa551872c399dd3c2d7ef55ae2a64
SHA256

0ef1a8607ed51deee94b962ad58c5188f5a8340111452fbf7b257934eab85150
SHA512

3de79d4d32a7fa8115b18f9b0192673607a46c717f8c8bf909883c9931424155956eed073c7faa3635bb07146a9cc5c587963aa5b07e05b3ee875535cc6b1a25
SSDEEP

6144:z8j2Eo3EZ2OyRa15COIiOLmA9eQ4cMriRWFr5NL9IxBiToA:zFEowiTLqQ4cGpr5x9Ia

Score

N/A

Malware Config

Signatures

Files

0ef1a8607ed51deee94b962ad58c5188f5a8340111452fbf7b257934eab85150
.exe windows x86

3e56b72cf67f0423246a47fdc0f81a01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lz32

LZStart
LZInit
LZDone
CopyLZFile
LZCopy

kernel32

SetStdHandle
FlushFileBuffers
SetSystemTimeAdjustment
GetSystemDirectoryA
OpenMutexA
CloseHandle
WideCharToMultiByte
HeapFree
GetLastError
GetFileType
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCPInfo
RtlUnwind
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetEndOfFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
HeapSize
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryA
GetACP
GetOEMCP
InterlockedExchange
GetLocaleInfoW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e56b72cf67f0423246a47fdc0f81a01

Headers

File Characteristics

Imports

lz32

kernel32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 146KB - Virtual size: 145KB

.data Size: 126KB - Virtual size: 1.1MB

.rsrc Size: 46KB - Virtual size: 45KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 146KB - Virtual size: 145KB

.data
Size: 126KB - Virtual size: 1.1MB

.rsrc
Size: 46KB - Virtual size: 45KB