cc94b8dd4d7490c497642203741f607160efc6694e7b3d6f0d4d6bde4ed0aa4d

General

Target

cc94b8dd4d7490c497642203741f607160efc6694e7b3d6f0d4d6bde4ed0aa4d
Size

138KB
MD5

d8b0e8ee617ed75ec877f1f300f537b5
SHA1

90eefc8e06f7f088579e733208a38354c9e8513f
SHA256

cc94b8dd4d7490c497642203741f607160efc6694e7b3d6f0d4d6bde4ed0aa4d
SHA512

7e4e9c05a6f803e01d880e9c0c1a4a3ba9c06afc74c6a5ef98ed046538533776afc32db51713e101c7713bdf89363cc6b6fd4c685c92aacda54e9c923db1c131
SSDEEP

3072:aVfrLmfoTTDGJ3TFDJtdfk8CRKf2WSRkyNa7xVpa:ahrSfoTTDwFDJ/88mKupka4Vpa

Score

N/A

Malware Config

Signatures

Files

cc94b8dd4d7490c497642203741f607160efc6694e7b3d6f0d4d6bde4ed0aa4d
.exe windows x86

4fcd1c1066a9053a7d09348d151f2ea3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
CreateEventA
WaitForSingleObject
ResetEvent
lstrcpyA
SetEvent
InterlockedExchange
CancelIo
Sleep
lstrlenA
lstrcatA
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
lstrcmpA
GetPrivateProfileStringA
GetVersionExA
CreateDirectoryA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
LocalFree
LocalAlloc
CreateFileA
ReadFile
SetFilePointer
GetModuleFileNameA
GetLastError
SetLastError
CreateProcessA
GetCurrentProcess
WriteProcessMemory
VirtualAllocEx
OpenProcess
TerminateThread
ExitProcess
DeleteFileA
GetLocalTime
HeapFree
HeapAlloc
GetProcessHeap
GlobalFree
GlobalUnlock
GlobalSize
ReleaseMutex
GetTickCount
SetErrorMode
OutputDebugStringA
RaiseException
GetStartupInfoA
GetModuleHandleA

msvcrt

memcpy
__CxxFrameHandler
memmove
ceil
_ftol
strlen
strstr
memcmp
strcpy
strchr
malloc
strcmp
free
_except_handler3
strrchr
rename
strcat
strncpy
_CxxThrowException
atoi
strncmp
_errno
wcscpy
strtok
strncat
_beginthreadex
calloc
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strnicmp
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_strupr

msvfw32

ICSendMessage
ICSeqCompressFrameEnd

Sections

.ujyhkuy
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fcd1c1066a9053a7d09348d151f2ea3

Headers

File Characteristics

Imports

kernel32

msvcrt

msvfw32

Sections

.ujyhkuy Size: 12KB - Virtual size: 12KB

.data Size: 124KB - Virtual size: 123KB

.rsrc Size: 1024B - Virtual size: 816B

.ujyhkuy
Size: 12KB - Virtual size: 12KB

.data
Size: 124KB - Virtual size: 123KB

.rsrc
Size: 1024B - Virtual size: 816B