b9c0d73395116ab9d610ef91220048e3af3c99831dc584933847458a97020ae1

General

Target

b9c0d73395116ab9d610ef91220048e3af3c99831dc584933847458a97020ae1
Size

285KB
MD5

a3c97aa8e653b43b9a27b7e637652ce2
SHA1

62a3a5509f38993954ad59f94472080945da1e37
SHA256

b9c0d73395116ab9d610ef91220048e3af3c99831dc584933847458a97020ae1
SHA512

2003aabda2fb7ae432dc5041523ddb34d345a6282c2d2d096645b837bf66d695d5712dfa92160bced5cb90f0d8d246ae380e373f6e2d9093e8601cf9f8167840
SSDEEP

6144:9CCKXWJqKJK/K6BiWhSIK2T4RQK5OkGwmwY7CZTVIeYoMm:YCKXWJTJnZWhfsSK58w6YTV7N

Score

N/A

Malware Config

Signatures

Files

b9c0d73395116ab9d610ef91220048e3af3c99831dc584933847458a97020ae1
.exe windows x86

aab1aa9754776932b6e11b444a7c2755

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

StrRetToStrA
SHCreateStreamOnFileEx
PathAppendA
PathIsContentTypeA
PathIsFileSpecA
PathCreateFromUrlW

rpcrt4

RpcStringFreeA

kernel32

CreateFileW
EnterCriticalSection
GlobalFree
FindAtomA
SetUnhandledExceptionFilter
GetCurrentThreadId
lstrlenA
MultiByteToWideChar
SetLastError
GetOEMCP
GlobalLock
TlsFree
GetTickCount
InterlockedIncrement
TlsAlloc
FlushInstructionCache
GlobalUnlock
SetLastError
CloseHandle
InterlockedExchange
lstrlenW
MulDiv
EnumResourceNamesA
LeaveCriticalSection
WaitForSingleObject
GetCurrentProcess
GetComputerNameW
GetLocaleInfoW
DeleteCriticalSection
GetStringTypeA
TlsGetValue
FormatMessageW
LocalAlloc
RaiseException
TlsSetValue
HeapSetInformation
GlobalAlloc
InterlockedDecrement
GlobalHandle
InitializeCriticalSection
lstrcmpW
WideCharToMultiByte

Sections

.text
Size: 139KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aab1aa9754776932b6e11b444a7c2755

Headers

File Characteristics

Imports

shell32

shlwapi

rpcrt4

kernel32

Sections

.text Size: 139KB - Virtual size: 275KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 142KB - Virtual size: 142KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 139KB - Virtual size: 275KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 142KB - Virtual size: 142KB

.rsrc
Size: 512B - Virtual size: 4KB