f1f1fe37203934b44c27c82d8e18cf59666a4b08984c3788f168981f44cf99af

General

Target

f1f1fe37203934b44c27c82d8e18cf59666a4b08984c3788f168981f44cf99af
Size

665KB
MD5

52664db442103a8e86780b4456688010
SHA1

bf33e414fbf8f623f8aca7754b5766a9fa4dee18
SHA256

f1f1fe37203934b44c27c82d8e18cf59666a4b08984c3788f168981f44cf99af
SHA512

25a73d0c5a50dd674427d630aa446afdbbcd8123155284bbdf9a85e417c5297e05840d99a16ea5510b3d59ebdda4f14188a2f0b939338b9d46ab3a862ccfa221
SSDEEP

12288:W8w4GSDNfbzQRx5gyx7jXk77yjgJz/nlFH7wfLq8CQwNOLrI6EFDe/GS8:nBNfbK77xnqsqzDwDSHQLrXEFDI8

Score

N/A

Malware Config

Signatures

Files

f1f1fe37203934b44c27c82d8e18cf59666a4b08984c3788f168981f44cf99af
.exe windows x86

5d9eced4abc604e947b926d271737f14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

_onexit
_decode_pointer
_except_handler4_common
_lock
_controlfp_s
_crt_debugger_hook
strstr
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
sprintf
srand
rand
strchr
_invoke_watson
memset

kernel32

GetTempPathA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
Sleep
QueryPerformanceCounter
FindResourceA
CloseHandle
CreateFileA
GetModuleHandleA
LockResource
CopyFileA
GetProcAddress
SizeofResource
WriteFile
GetTickCount
LoadResource

user32

GetCursorPos
MessageBoxA

shell32

ShellExecuteA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d9eced4abc604e947b926d271737f14

Headers

File Characteristics

Imports

msvcr80

kernel32

user32

shell32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 648KB - Virtual size: 647KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 648KB - Virtual size: 647KB