865d8b92c4e5c8e8b1134d1d07fe9df7c99e8169ff0279de1e31f22b0eb9543f

Sharing

Copy URL Twitter E-mail

General

Target

865d8b92c4e5c8e8b1134d1d07fe9df7c99e8169ff0279de1e31f22b0eb9543f
Size

136KB
MD5

09d535575cf48bbe8ccd5395759b71e0
SHA1

d726178a24b3e3a6d28b9a21a83202943ad505f6
SHA256

865d8b92c4e5c8e8b1134d1d07fe9df7c99e8169ff0279de1e31f22b0eb9543f
SHA512

f4a374aa50ee4067f8090b74a6a2186df601e35698f9961d8c88b8d75a02a2a70ce7a6f4756f71ea9391f002c371898c84974be78070c16c0391e02f183742ad
SSDEEP

3072:gCXuHef6dPSgv9H+8Xbh+pClKTttyfz9Dc9:ZCeSdPSgv9H+UbwcleWz9C

Score

N/A

Malware Config

Signatures

Files

865d8b92c4e5c8e8b1134d1d07fe9df7c99e8169ff0279de1e31f22b0eb9543f
.exe windows x86

bd2f8279853c417a38a21f2eccc608ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLocalTime
Sleep
DeleteFileA
WriteFile
GetTickCount
GetFileSize
GetProcAddress
LoadLibraryA
FlushFileBuffers
GetLocaleInfoA
VirtualQuery
GetSystemInfo
ResumeThread
SuspendThread
VirtualProtect
LCMapStringW
LCMapStringA
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
GetVersionExA
IsBadWritePtr
IsBadReadPtr
HeapValidate
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CloseHandle

user32

LoadCursorW
DestroyWindow
wsprintfA

gdi32

CreatePen

ws2_32

select
recv
send

winmm

mciSendCommandA

winscard

SCardConnectA

Exports

Exports

?hLOUD@@YAKK@Z

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd2f8279853c417a38a21f2eccc608ec

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ws2_32

winmm

winscard

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 4KB - Virtual size: 7KB

.tls Size: 4KB - Virtual size: 100B

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 4KB - Virtual size: 7KB

.tls
Size: 4KB - Virtual size: 100B

.rsrc
Size: 16KB - Virtual size: 13KB