b4e823f24848904ba84f6bd778fc2ee742c923ee05b1f4233ae72355e291ffba

General

Target

b4e823f24848904ba84f6bd778fc2ee742c923ee05b1f4233ae72355e291ffba
Size

198KB
MD5

d360336e7ac194ba8e1d78440732d783
SHA1

e46c9eaad496c065ba3d5b65ad7c168c56f89a77
SHA256

b4e823f24848904ba84f6bd778fc2ee742c923ee05b1f4233ae72355e291ffba
SHA512

5197f830d01c4e0862d89f795b20ae1a41921ec59b3e971d7189d3911677a9872de08ac5daf653da7b58588c9f8263c0d67203f8ed3e4b9788163479cf031279
SSDEEP

3072:l/lctxGtToC3ZKxfmjR0S6QB8cM8vs4V9CHM1AJswV5v22sVTkzKCuKP1XyNph0I:l/jJqxa8cM8IHM1AJbTuTkHNP1XshxZD

Score

N/A

Malware Config

Signatures

Files

b4e823f24848904ba84f6bd778fc2ee742c923ee05b1f4233ae72355e291ffba
.exe windows x86

6a823c7c7dbd3b61a69d1f003dc80152

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetModuleHandleA
VirtualAlloc
FindResourceA
GlobalFree
GlobalAlloc
WriteFile
GetStdHandle
SuspendThread
CreateThread
FreeResource
SizeofResource
GetSystemTime
GetLastError
FindResourceExA
VirtualProtect
GetProcAddress
VirtualQuery
SetLastError
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
Sleep
LockResource
CloseHandle
VirtualFree
LoadResource
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetDesktopWindow
IsWindowVisible
LoadIconA
SetSysColors

gdi32

SelectObject
CreateBitmapIndirect

avifil32

AVIBuildFilterA

ws2_32

WSAEventSelect

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 294KB - Virtual size: 597KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rlc
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6a823c7c7dbd3b61a69d1f003dc80152

Headers

File Characteristics

Imports

kernel32

user32

gdi32

avifil32

ws2_32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 294KB - Virtual size: 597KB

.rlc Size: 1024B - Virtual size: 16KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 294KB - Virtual size: 597KB

.rlc
Size: 1024B - Virtual size: 16KB