948179d3da1e5edda459673dbe5ea023f0f1e4f206263e7185db32b2eb708f22

General

Target

948179d3da1e5edda459673dbe5ea023f0f1e4f206263e7185db32b2eb708f22
Size

71KB
MD5

b21a7078f6b4be45184ea565516c5040
SHA1

dbb25927d6446d49602625d1cbf064f36e9537c3
SHA256

948179d3da1e5edda459673dbe5ea023f0f1e4f206263e7185db32b2eb708f22
SHA512

5af8da4a8f6a19c07a622670dabe2ccb61622327ddda4e38ee6d535f381eaf6ae92589b724699e23120e441df8d70378c9a741c480f5acdd12850bf22fc89202
SSDEEP

1536:ILMPP852olvx4d/2tTuvJUrTwO7GchB26p7l1t8G:VPZolvqUTuvJm7GCg6p7l1KG

Score

N/A

Malware Config

Signatures

Files

948179d3da1e5edda459673dbe5ea023f0f1e4f206263e7185db32b2eb708f22
.exe windows x86

f358867fa95660eedffeb318bc38f599

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
Sleep
LoadLibraryA
FreeLibrary
GetModuleHandleA
WaitForSingleObject
InterlockedIncrement
CloseHandle
GetFileSize
WriteFile
SetFilePointer
CreateFileA
MoveFileExA
OutputDebugStringA
CopyFileA
GetModuleFileNameA
CreateThread
GetProcAddress
GetLastError
CreateMutexA
CreateDirectoryA
CreateProcessA
ExitProcess
ReleaseMutex
OpenMutexA
WinExec
GetCurrentProcess
ResumeThread
SetThreadPriority
GetCurrentThread
SetPriorityClass
lstrcatA
lstrcpyA
VirtualProtect
VirtualQuery
lstrlenA
GlobalMemoryStatusEx
GetVersionExA
GetSystemDefaultUILanguage
MoveFileA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapFree
TerminateProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
LCMapStringA
LCMapStringW
FlushFileBuffers
LocalAlloc
InterlockedExchange
RaiseException

Exports

Exports

MyCopyFile

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f358867fa95660eedffeb318bc38f599

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 14KB - Virtual size: 20KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 14KB - Virtual size: 20KB

.rsrc
Size: 1KB - Virtual size: 1KB