c5e187248f642e7d9aae1c1184434b9a27592d956d2db5665cbd912ee2dbfe3f

General

Target

c5e187248f642e7d9aae1c1184434b9a27592d956d2db5665cbd912ee2dbfe3f
Size

304KB
MD5

0203af394bab38cd873cef479398fc98
SHA1

c2e1c11edbb691e8b2ff257f307c224fddf28b68
SHA256

c5e187248f642e7d9aae1c1184434b9a27592d956d2db5665cbd912ee2dbfe3f
SHA512

d9ed30132039ebef7183dd3b73b7dd3f66dad5c5bed1ad5a02c27dbe39d474c3259fbd04aa1203c1ffd205389cbc8c25967587d9053756ae06b28453ca71e3ec
SSDEEP

6144:oSq8kerB3jY1z+8/iNoC8r6axpu4+pVRo8X17:oSq8ker9Y1jiWvuxVRo8l7

Score

N/A

Malware Config

Signatures

Files

c5e187248f642e7d9aae1c1184434b9a27592d956d2db5665cbd912ee2dbfe3f
.exe windows x86

f64559f1cd92ebd62c61a52a1e1ec911

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
VirtualFree
VirtualAlloc
GetProcAddress
Sleep
ResumeThread
SetEvent
CloseHandle
CreateEventA
GetTickCount
ResetEvent
ExitProcess
SetStdHandle
LCMapStringW
LCMapStringA
GetLocaleInfoA
LoadLibraryA
InterlockedExchange
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
RaiseException
SetFilePointer
VirtualProtect
GetSystemInfo
VirtualQuery
FlushFileBuffers

user32

PeekMessageA
SetActiveWindow
TranslateMessage

gdi32

CreateCompatibleDC

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rle
Size: 208KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f64559f1cd92ebd62c61a52a1e1ec911

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 16KB

.rle Size: 208KB - Virtual size: 1.9MB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 16KB

.rle
Size: 208KB - Virtual size: 1.9MB

.rsrc
Size: 12KB - Virtual size: 9KB