a42831c9b5293e9cac39d94a4acacab2e355723f52ebe01c3b0f46440ca864c5

General

Target

a42831c9b5293e9cac39d94a4acacab2e355723f52ebe01c3b0f46440ca864c5
Size

2.0MB
MD5

a16eb384a33b13eaa4428dd5f92e4849
SHA1

240bc60ef412b911f756b28b03e12fb6d3e99bfc
SHA256

a42831c9b5293e9cac39d94a4acacab2e355723f52ebe01c3b0f46440ca864c5
SHA512

1d82cdbe30c5efc1e63c5608bad1e78df421fd835baaeb4c1d7cc794129972be3ce0c64fc415cbe899b38cdc77357621e93648f342508e4d95405385033fcf90
SSDEEP

49152:Qpf0rh4fnPMpUecT9mCppiPkkzZIJykR7NnrUG3WASKyZHw:QOrhyPMpUe3E70B+ZQG3WA6V

Score

N/A

Malware Config

Signatures

Files

a42831c9b5293e9cac39d94a4acacab2e355723f52ebe01c3b0f46440ca864c5
.exe windows x86

f34e00900abb6883bad483c926f1e154

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetProcAddress
GetModuleHandleA
lstrlenA
WriteFile
GetCurrentDirectoryA
GetTempPathA
lstrcpyA
ReadProcessMemory
GetModuleFileNameA
GetEnvironmentVariableA
GetShortPathNameA
LoadLibraryA
Sleep
GetWindowsDirectoryA
ExitProcess
GetSystemDirectoryA
lstrcatA
CreateFileA
ReadFile
CloseHandle
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
DeleteFileA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
CreateFileW
SetEndOfFile

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.doc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34e00900abb6883bad483c926f1e154

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 104KB - Virtual size: 104KB

.doc Size: 36KB - Virtual size: 36KB

.rsrc Size: 1.9MB - Virtual size: 8KB

.text
Size: 104KB - Virtual size: 104KB

.doc
Size: 36KB - Virtual size: 36KB

.rsrc
Size: 1.9MB - Virtual size: 8KB