b5b3a4130081dbb7fd3f1f9c5cedf648707d722cbc54bb85d7897ecbd38444dd

General

Target

b5b3a4130081dbb7fd3f1f9c5cedf648707d722cbc54bb85d7897ecbd38444dd
Size

282KB
MD5

96d97d055ab3b23eace688348df97c8d
SHA1

517081179f303587adc2282a72bfe6d24aea2673
SHA256

b5b3a4130081dbb7fd3f1f9c5cedf648707d722cbc54bb85d7897ecbd38444dd
SHA512

acd04d8b652207bdaf354f3955da5f534d6950f4cf49418dac50571bf9e38b10e6092358d9b0fde71c66479eda9efffbf488c0474568b67268fdcf9f1cdab893
SSDEEP

6144:6XMMzDt3TApBQOezk38j0ol7Puabh9ZXBgLvIc6d6DJufS:688TIQOez68xh7ZRg7Ic6dgkS

Score

N/A

Malware Config

Signatures

Files

b5b3a4130081dbb7fd3f1f9c5cedf648707d722cbc54bb85d7897ecbd38444dd
.exe windows x86

02bc8865fe6299a369fd0df7ba5f334d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrA

kernel32

GetStartupInfoA
VirtualProtect
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GetCurrentProcessId
ExitProcess
CreateFileW
GetModuleHandleA
Sleep
VirtualAlloc
GetTickCount
GetProcAddress
LoadLibraryA
GetTempPathA
GlobalAddAtomA
CreateProcessA
CopyFileA
lstrcatA
DeleteFileA
GetModuleFileNameA
GetLastError
lstrcpyA
GetModuleFileNameW
GetSystemTime
GetCommandLineA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemInfo
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
HeapSize

user32

GetActiveWindow
GetSystemMetrics
GetWindowLongA
GetDesktopWindow

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02bc8865fe6299a369fd0df7ba5f334d

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 696B

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 696B