9234a76bc19b22247653a6a2224f3e7cf86d8cc2a04db6838e6feb6d75f924d3

General

Target

9234a76bc19b22247653a6a2224f3e7cf86d8cc2a04db6838e6feb6d75f924d3
Size

206KB
MD5

e910dc4c0f79ae414fffc95537e34c67
SHA1

a308bcc44156f5d5e75fcb33a38d299c3a3e8906
SHA256

9234a76bc19b22247653a6a2224f3e7cf86d8cc2a04db6838e6feb6d75f924d3
SHA512

a81dfb3cb2d5ff71c39224d29a4e740d45e4df24b4553b1841873380e212e13600b98488016c88963275dd956b8c82ddaa2d9f7139b734e3c22b2fad07165908
SSDEEP

6144:XbNXgzY7aTIENC8tS7HC14uWy9VfkHXkbz5:X2zY7aTQ8tS7Ha4ty9tO0bd

Score

N/A

Malware Config

Signatures

Files

9234a76bc19b22247653a6a2224f3e7cf86d8cc2a04db6838e6feb6d75f924d3
.exe windows x86

76c888a3e12edecb0b359dc237dc2867

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
VirtualProtect
VirtualFree
LoadLibraryA
VirtualAlloc
GetProcAddress
GetModuleHandleA
ResetEvent
CreateEventA
OpenMutexA
GlobalLock
GetFileType
GetLastError
OpenFileMappingA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemInfo

user32

PostMessageA
EnumChildWindows
GetWindowInfo
FindWindowA
LoadIconA

shell32

ord196

psapi

EnumProcesses

msvfw32

DrawDibDraw

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76c888a3e12edecb0b359dc237dc2867

Headers

File Characteristics

Imports

kernel32

user32

shell32

psapi

msvfw32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 176KB - Virtual size: 175KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 176KB - Virtual size: 175KB