ba2d42f9de60751938e7ded2b0dad2c8e3983db3a8aa3838ab8cee2f950b64ef

General

Target

ba2d42f9de60751938e7ded2b0dad2c8e3983db3a8aa3838ab8cee2f950b64ef
Size

131KB
MD5

c2bda7ab612e21ec05531584f9d58305
SHA1

8875883667c96219d34cd32aec4db782abdaa299
SHA256

ba2d42f9de60751938e7ded2b0dad2c8e3983db3a8aa3838ab8cee2f950b64ef
SHA512

8d1b7958774176f618179e9049c77c82c965c3577af449cde72d2aa389f186aea1db31b1807cd31a31382e377ce0a22c03c1d065559ced2b81fd0bddc9ee715a
SSDEEP

3072:J5qzFkDfDRL2oP1Pzgc9i8vsK+rTbQmJt4FP:3qpkfRyoF0AArTb1

Score

N/A

Malware Config

Signatures

Files

ba2d42f9de60751938e7ded2b0dad2c8e3983db3a8aa3838ab8cee2f950b64ef
.exe windows x86

242882b50f39d2e884d05d40befc8368

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoMarshalInterThreadInterfaceInStream
OleRegEnumVerbs
CoTaskMemRealloc
CoCreateGuid
CLSIDFromProgID
CoInitializeSecurity
StringFromGUID2
CreateStreamOnHGlobal
CoUnmarshalInterface
GetHGlobalFromStream
CoSetProxyBlanket
OleRun
StgOpenStorage
CoRevokeClassObject
OleUninitialize

msvcrt

__setusermatherr
wcsstr
wcscmp
__p__commode
sprintf
__set_app_type
_stat
wcsncpy
__p__osver
__p__fmode
__initenv
_access
towupper
_CxxThrowException
_snprintf
?terminate@@YAXXZ
_rotr
wcscat
_c_exit
_ftol
_ultow
malloc
srand
__p__iob
_unlock

kernel32

SystemTimeToFileTime
DeviceIoControl
OpenMutexA
GetFileAttributesW
GetCurrentProcessId
GetModuleHandleW
CreateDirectoryA
CreateMutexA
ExitProcess
GetExitCodeProcess
FindResourceA
lstrcmpiA
GetProcessHeap
SetEvent
GetSystemDirectoryW
HeapSize
MulDiv
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
VirtualAlloc

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 62KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

242882b50f39d2e884d05d40befc8368

Headers

File Characteristics

Imports

ole32

msvcrt

kernel32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 62KB - Virtual size: 62KB

.data Size: 62KB - Virtual size: 187KB

.reloc Size: 512B - Virtual size: 488B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 62KB - Virtual size: 62KB

.data
Size: 62KB - Virtual size: 187KB

.reloc
Size: 512B - Virtual size: 488B