dff938cf0a2fd81c6c3c4b3b0a4204bd91d41dfd76a7a4fba02c3165413bfb1b

General

Target

dff938cf0a2fd81c6c3c4b3b0a4204bd91d41dfd76a7a4fba02c3165413bfb1b
Size

120KB
MD5

37d0832172e04da4782661afe3ff2ef3
SHA1

222b602aa1ee84a781d06e04536b895de48b144b
SHA256

dff938cf0a2fd81c6c3c4b3b0a4204bd91d41dfd76a7a4fba02c3165413bfb1b
SHA512

36a9ee80373fc78299b806acea32b9a3f88d185d2b9bb1c00cd502aeb805926443687b7dfd30a65f5cad0b424622cf4b63a9ed805c52d8dffd63dcf48dfb4bf7
SSDEEP

1536:ZaSL9u8amwoNpmLHPpLgZwp4VKQFnToIffQ6Hr8lMgx0JIUi:jWoNpmrTp4VNtTBffQ6HAlz

Score

N/A

Malware Config

Signatures

Files

dff938cf0a2fd81c6c3c4b3b0a4204bd91d41dfd76a7a4fba02c3165413bfb1b
.exe windows x86

97bf02d4ea3aa70e7619853fc9c7313d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
WinExec
GetSystemDirectoryA
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

ShellExecuteA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

97bf02d4ea3aa70e7619853fc9c7313d

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 64KB - Virtual size: 64KB

Size: 12KB - Virtual size: 12KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 64KB - Virtual size: 64KB