2121ef69bea96c1a0a881483e70e7e36461476c3fa441becdb7293871da28265

General

Target

2121ef69bea96c1a0a881483e70e7e36461476c3fa441becdb7293871da28265
Size

296KB
MD5

cb87d7a33007761dd8fcd14b9aa2edde
SHA1

48d30249de24ae819a405d2fe011b5d786abf064
SHA256

2121ef69bea96c1a0a881483e70e7e36461476c3fa441becdb7293871da28265
SHA512

4d30844a74cf077e20a23d0dccc4be47f2ac0af321b37f4014a041ca9130f27c4e299e245e86b5c2635effa51f6a8fa2ce04dcb4b357217c40029e293f73284c
SSDEEP

3072:X2HsDB6R9iZ0tzd5zHVgIUqNDU0y2dLBO4itYGVJ+NZLkdOLT2bC3AyF:m46R+0FjVgIz+0y2mP5eNZLkSSxy

Score

N/A

Malware Config

Signatures

Files

2121ef69bea96c1a0a881483e70e7e36461476c3fa441becdb7293871da28265
.exe windows x86

c6e1b7dfb247c4d44ea7a566617ba9ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualFree
GetLastError
VirtualAlloc
TerminateProcess
LoadLibraryA
InterlockedExchange
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
CloseHandle
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
VirtualQuery
SetFilePointer
SetEndOfFile
ReadFile
HeapSize
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualProtect
GetSystemInfo

advapi32

EncryptFileA

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6e1b7dfb247c4d44ea7a566617ba9ac

Headers

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 32KB - Virtual size: 36KB

.tls Size: 196KB - Virtual size: 195KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 32KB - Virtual size: 36KB

.tls
Size: 196KB - Virtual size: 195KB

.rsrc
Size: 24KB - Virtual size: 21KB