c4b408cdd4715ca4a386d33f39e8fde8a011c6d1b82dee85f7fef53f00bb3e15

General

Target

c4b408cdd4715ca4a386d33f39e8fde8a011c6d1b82dee85f7fef53f00bb3e15
Size

235KB
MD5

8465bfd2a93c7bee08e5800404f7465b
SHA1

7135ebcfdf333591c6d5baab4b5e2114be6c6735
SHA256

c4b408cdd4715ca4a386d33f39e8fde8a011c6d1b82dee85f7fef53f00bb3e15
SHA512

d34a24fa4496af8de5d0918daa121d05ad80d4fd9bf209928ca934250adbdb3923f4d2d7c07d94c123f5bfcf28a17b70b0b709055463acf30e134b1adacded9a
SSDEEP

6144:NaSEDIrS0fWuEjQodvqcXgeZpfQ2OgklHF:QSEDQS06jxMWgAYBgklHF

Score

N/A

Malware Config

Signatures

Files

c4b408cdd4715ca4a386d33f39e8fde8a011c6d1b82dee85f7fef53f00bb3e15
.exe windows x86

620275003a6e1434cdd94362b4658316

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAGetLastError

comctl32

ord14

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetTickCount
ExitProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
RtlUnwind
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
CloseHandle
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
VirtualQuery
InterlockedExchange
InitializeCriticalSection
GetCPInfo
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetACP
GetOEMCP
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

620275003a6e1434cdd94362b4658316

Headers

File Characteristics

Imports

ws2_32

comctl32

kernel32

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 165KB - Virtual size: 164KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 165KB - Virtual size: 164KB