86f06f5b7cf152b6486bf914043021bbe1e31c1cba9c1a2b397832f807c4fa22

General

Target

86f06f5b7cf152b6486bf914043021bbe1e31c1cba9c1a2b397832f807c4fa22
Size

480KB
MD5

f1d0afc119683891951b74be4baf8fb8
SHA1

d071dba54d06d2fb1806f8312eb5a25bab507153
SHA256

86f06f5b7cf152b6486bf914043021bbe1e31c1cba9c1a2b397832f807c4fa22
SHA512

d1a7f65f095ffbfcb8f36631d88e34026fdb64629cb9032f1facfebafaecce773a75dc45705d234957481c8c9dc9b73708d69fca05565ccb543c8524461776aa
SSDEEP

6144:T4KS6jass2OoevoS+eW6hyleMjyyoyCSbYcCzwAUhoB7oYxxKNy/4D418e/Mh:TyKUoSf14wypQcCDUOoCcyAmp/

Score

N/A

Malware Config

Signatures

Files

86f06f5b7cf152b6486bf914043021bbe1e31c1cba9c1a2b397832f807c4fa22
.exe windows x86

273424e8f1bc02aa4e5c07f3f2bcbb01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateTimerQueue
GetModuleHandleA
VirtualAlloc
Sleep
PulseEvent
GetTickCount
LocalAlloc
GetProcAddress
VirtualLock
VirtualQuery
GetSystemInfo
ResetEvent
GetLastError
VirtualProtect
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

IsIconic
MoveWindow
GetSysColorBrush
GetWindow
LoadIconA

gdi32

CreateBrushIndirect

winmm

joyGetPosEx
joySetCapture

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 420KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

273424e8f1bc02aa4e5c07f3f2bcbb01

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 420KB - Virtual size: 736KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 420KB - Virtual size: 736KB

.rsrc
Size: 16KB - Virtual size: 14KB