ef21722bd73f5929f19f9c29ff27ea5fc2a6b4af6506a2c9e881d16bf813cc0d

General

Target

ef21722bd73f5929f19f9c29ff27ea5fc2a6b4af6506a2c9e881d16bf813cc0d
Size

236KB
MD5

4def7f748cc05aa71a4c9c648505083f
SHA1

199f3d35e0a264aa4f72669f8381affdc4f3bf50
SHA256

ef21722bd73f5929f19f9c29ff27ea5fc2a6b4af6506a2c9e881d16bf813cc0d
SHA512

929fb5cfe576ca1c2fb8dff6cd4fcbbd8b9fd2428ddee90692c24cf061afadc0d509a70681a0da4254934dda217cd972e6cc9c436d36917e187987d8f117d650
SSDEEP

3072:BGDqBAi481qqT+JWKk+ERCi7snXzWbY0t3LbBALxE3phd4IJv55TFY3GlpQX6TqW:Q+BABnJissP/tR8ozdRh5Joqn189HPhC

Score

N/A

Malware Config

Signatures

Files

ef21722bd73f5929f19f9c29ff27ea5fc2a6b4af6506a2c9e881d16bf813cc0d
.exe windows x86

a2943accfe498a40b1a969a06212b18c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
fclose
fabs
ceil
malloc
floor
free
strlen
memmove

kernel32

GetModuleHandleA
HeapCreate
CloseHandle
HeapDestroy
ExitProcess
EnterCriticalSection
HeapReAlloc
HeapAlloc
LeaveCriticalSection
InitializeCriticalSection
HeapFree
TlsGetValue
TlsSetValue
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

user32

CallWindowProcA
DestroyIcon
FillRect

gdi32

GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zaer
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2943accfe498a40b1a969a06212b18c

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

wsock32

Sections

.code Size: 9KB - Virtual size: 8KB

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 512B - Virtual size: 184B

.zaer Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.code
Size: 9KB - Virtual size: 8KB

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 512B - Virtual size: 184B

.zaer
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB