a5d17aaca65766273d3dcc0dee5b459571f90f092cc30164508ed9e9773b84ef

General

Target

a5d17aaca65766273d3dcc0dee5b459571f90f092cc30164508ed9e9773b84ef
Size

317KB
MD5

38961ba2513ed1bb94313f18a58e7aad
SHA1

db3b0350d377d728d14156605534052eca478551
SHA256

a5d17aaca65766273d3dcc0dee5b459571f90f092cc30164508ed9e9773b84ef
SHA512

2dcc16647fc0923e17823b6426526a647dea3ccd08b0e3e909c8bbd1c44ba971cf25c8cc96c7509b7b0c425d3b3560a40b0aa4a0553b25cc16911d7135a27e8f
SSDEEP

6144:6d41vdeaN00xutnaE+6ZLggmhKKvjwaIlP:6G1eaNRsw4Z9mhth

Score

N/A

Malware Config

Signatures

Files

a5d17aaca65766273d3dcc0dee5b459571f90f092cc30164508ed9e9773b84ef
.exe windows x86

602027ab49a6504d3b57a70ad9ace780

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
GetLastError
OpenMutexA
CreateMutexA
CloseHandle
VirtualAlloc
ResumeThread
CreateThread
Sleep
GetProcAddress
VirtualFree
GetModuleHandleA
ExitProcess
GlobalAlloc
SuspendThread
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
VirtualQuery

user32

SetTimer
GetDC
LoadCursorA
GetCursorPos
GetDesktopWindow

msvfw32

DrawDibChangePalette

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

602027ab49a6504d3b57a70ad9ace780

Headers

File Characteristics

Imports

kernel32

user32

msvfw32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 252KB - Virtual size: 251KB

.rsrc Size: 33KB - Virtual size: 373KB

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 252KB - Virtual size: 251KB

.rsrc
Size: 33KB - Virtual size: 373KB