c49fc7a15f79164bf20f31e7701996ba02390bad45a83c01be354e8d54c772a7

General

Target

c49fc7a15f79164bf20f31e7701996ba02390bad45a83c01be354e8d54c772a7
Size

340KB
MD5

a50c5ba8a92c7b199ac9e20a815d9e69
SHA1

3b514e075acded381277369707699d3f39ae7141
SHA256

c49fc7a15f79164bf20f31e7701996ba02390bad45a83c01be354e8d54c772a7
SHA512

6a37affebbe458d70763dac45ced14a074009e3eabf044650e8bfd16d87f2f1efa0b89bafa26902a849668c6c774fee14a58c26916c4a2373a064d4f135483c2
SSDEEP

6144:yl6jg+goyoMGGGGGGGGGGbGGGGGGGGGG6GG/DGXxeXJE85PmWyVcjUkdHbIIA3:yMsdKHjl

Score

N/A

Malware Config

Signatures

Files

c49fc7a15f79164bf20f31e7701996ba02390bad45a83c01be354e8d54c772a7
.exe windows x86

c850e4e6d23b2b245bfbfef66201fe8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
FlushFileBuffers
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
GetStringTypeW

user32

LoadCursorA
RegisterClassA
CreateWindowExA
UpdateWindow
GetMessageA
DispatchMessageA
TranslateMessage
BeginPaint
EndPaint
ShowWindow
PostQuitMessage
DestroyWindow
DefWindowProcA

gdi32

TextOutA
GetStockObject

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c850e4e6d23b2b245bfbfef66201fe8c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 20KB - Virtual size: 19KB

.bss Size: - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 17KB

.rsrc Size: 292KB - Virtual size: 292KB

.text
Size: 20KB - Virtual size: 19KB

.bss
Size: - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 17KB

.rsrc
Size: 292KB - Virtual size: 292KB