ba1c267223e325b1476515f7b5d4e6979f1f62916857b4f2154a3a4c0813db8d

General

Target

ba1c267223e325b1476515f7b5d4e6979f1f62916857b4f2154a3a4c0813db8d
Size

314KB
MD5

5b29231b1c407ca07334c71afe0f4932
SHA1

93edf400e154fc49a5db7f101ce4e5c107b23cb0
SHA256

ba1c267223e325b1476515f7b5d4e6979f1f62916857b4f2154a3a4c0813db8d
SHA512

ad76ea130f7913bd98aa80b92664f15e5542b7751713345917e9e997bc70e0fb57415fb62765557efceebe33e80005d4f37bad3662eb4605705d3d23b8a3388f
SSDEEP

6144:ReXaxZWe33u4FAiSsfCVTJkNvfMArzIJNR:RelO3fzSJTaN3MArs

Score

N/A

Malware Config

Signatures

Files

ba1c267223e325b1476515f7b5d4e6979f1f62916857b4f2154a3a4c0813db8d
.exe windows x86

402f6e09b94bfda2a1a9d108e2d00586

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
Sleep
GetLastError
CloseHandle
WriteFile
VirtualAlloc
OpenFile
GetCommandLineA
DeleteFileA
GetCurrentProcess
GetCurrentProcessId
ReleaseMutex
ReleaseSemaphore
OpenEventA
SetFileApisToANSI
ExitProcess
GetPriorityClass
TlsSetValue
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetStringTypeA
GetModuleHandleA
ResetEvent
VirtualAllocEx
HeapCompact
GetProcAddress
LCMapStringW
MultiByteToWideChar
LCMapStringA
VirtualQuery
GetStartupInfoA
GetVersionExA
TerminateProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime

user32

EnumWindows
LoadAcceleratorsA
DrawTextA
LoadStringA
IsIconic

gdi32

SelectObject
PatBlt

advapi32

OpenProcessToken

psapi

EmptyWorkingSet

msvfw32

DrawDibDraw

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

402f6e09b94bfda2a1a9d108e2d00586

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

psapi

msvfw32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 291KB - Virtual size: 699KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 291KB - Virtual size: 699KB