9369c0718d165e9606f847ee22bde32bc22effe1ab84c8b2e7119c1ca9c86b2e

General

Target

9369c0718d165e9606f847ee22bde32bc22effe1ab84c8b2e7119c1ca9c86b2e
Size

71KB
MD5

1b8f283383c43d786dfc2ea9ba9ece43
SHA1

0bfa7f77ad2eb24402dd391d1b5bcb69609e4fba
SHA256

9369c0718d165e9606f847ee22bde32bc22effe1ab84c8b2e7119c1ca9c86b2e
SHA512

0b06e789ad29e7a816eb68f3877ad3ec3b51d7a85a7e300757f22c6d47bce70fc7e88b0181bef4e51f6af37eee933b754392ae1a58b29582c36c7a57f19bfeae
SSDEEP

768:lujcoW51wWQeuEYQFi0jaBqXzjF99442FDGxRUjKhdAl9blajOX8IhhGvdM:lujc11wWQOYYDzsDw6ehdAl9oSLhk6

Score

N/A

Malware Config

Signatures

Files

9369c0718d165e9606f847ee22bde32bc22effe1ab84c8b2e7119c1ca9c86b2e
.exe windows x86

5e1f1492f7518fb9b38beaffff7621ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrA

kernel32

GetVersionExA
VirtualProtect
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GetLastError
ExitProcess
GlobalAddAtomA
GetCurrentProcessId
CreateFileW
GetModuleHandleA
Sleep
VirtualAlloc
GetTickCount
GetProcAddress
LoadLibraryA
GetTempPathA
CreateProcessA
CopyFileA
DeleteFileA
GetModuleFileNameA
GetCurrentThreadId
lstrcpyA
GetModuleFileNameW
GetSystemTime
GetCommandLineA
GetLocaleInfoA
HeapSize
LCMapStringW
GetStartupInfoA
GetSystemInfo
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapAlloc
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA

user32

GetActiveWindow

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e1f1492f7518fb9b38beaffff7621ed

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 48KB

.rsrc Size: 4KB - Virtual size: 696B

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 48KB

.rsrc
Size: 4KB - Virtual size: 696B