a448cb3f2731d721ab56826cdad57428fde6862a9763848cdcb4b937b162f763

General

Target

a448cb3f2731d721ab56826cdad57428fde6862a9763848cdcb4b937b162f763
Size

2.0MB
MD5

dc09f7a399c203157c6a701110295e59
SHA1

97225facfe498f366cf267f42309ddf6f20b02ab
SHA256

a448cb3f2731d721ab56826cdad57428fde6862a9763848cdcb4b937b162f763
SHA512

3da411b06eb4c9d12eb015840d9be0f06026faf4a602409662778b3e55a4929f4e0f5cec4be1a378e37e98573a0e1d43602d4da66846215d2e8108433b71d10f
SSDEEP

24576:Vy36uqFIkdDcSf1F4cKzvaYrL7Ygy5P2A7wqtT/EZZ56pWDRVAp6l3uXoaLraJYh:s0VdDcSnW9Yg0PXtYZZBVAZoaexyO7

Score

N/A

Malware Config

Signatures

Files

a448cb3f2731d721ab56826cdad57428fde6862a9763848cdcb4b937b162f763
.exe windows x86

0fa9e9a54b11664c6b87c5d0a7a275d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

GetClassFile
StringFromGUID2

kernel32

SetErrorMode
FreeLibrary
GetFileAttributesW
CreateFileA
SetConsoleCP
GetModuleFileNameA
TlsGetValue
GetStartupInfoA
GetVersion
IsDBCSLeadByte
GetEnvironmentStrings
HeapAlloc
HeapDestroy
GetConsoleCP
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
Sleep
TerminateProcess
GetOEMCP
SetStdHandle
GetFileSize
InterlockedExchange
LoadResource
GetModuleFileNameW
GetACP
GetModuleHandleA
ReadFile
GetWindowsDirectoryA
QueryPerformanceCounter
InitializeCriticalSection
CloseHandle
MulDiv
SizeofResource
ExitProcess

gdi32

BitBlt
DeleteDC

user32

SetTimer
SetWindowLongA
SendMessageW

msvcrt

?what@exception@@UBEPBDXZ
_vsnwprintf
_amsg_exit

lz32

LZRead
LZClose
LZCopy

advapi32

GetTokenInformation
RegQueryValueExW

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fa9e9a54b11664c6b87c5d0a7a275d9

Headers

File Characteristics

Imports

ole32

kernel32

gdi32

user32

msvcrt

lz32

advapi32

Sections

.text Size: 291KB - Virtual size: 291KB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 512B - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 116B

.text
Size: 291KB - Virtual size: 291KB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 116B