b371db59ed4b17665fafd983864c05f63b72648d04c547fe2c8b768f13892b42

General

Target

b371db59ed4b17665fafd983864c05f63b72648d04c547fe2c8b768f13892b42
Size

216KB
MD5

47e641695bdedb48bffce3d19d5546a8
SHA1

8e2a73b2d09d60408b297b698afd81a26b772143
SHA256

b371db59ed4b17665fafd983864c05f63b72648d04c547fe2c8b768f13892b42
SHA512

7acf0b5ad16e223ac72a08ba48f110cbdcb5e2a48e23e0dcaaf75fb52a2a0236597766d6fe7ca1c3f102a81d553de1f46026db63554cacae09879145dcc9a411
SSDEEP

3072:IoX7yi6pbKq+XLMoBAEMmRZZYMC6XH7mImGofk:IO7yi6pbKI4AEMmvZPhiI

Score

N/A

Malware Config

Signatures

Files

b371db59ed4b17665fafd983864c05f63b72648d04c547fe2c8b768f13892b42
.exe windows x86

a205f7c6c0238dc652fc0db4eb5973d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
FindNextFileA
FindFirstFileA
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
GetSystemDirectoryA
WinExec
GetCurrentDirectoryA
TerminateProcess
OpenProcess
Sleep
GetLastError
CreateMutexA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LCMapStringA
SetEnvironmentVariableA
LCMapStringW
CompareStringA
GetStringTypeW
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
GetCurrentProcess
DebugBreak
InterlockedDecrement
OutputDebugStringA
CreateThread
LoadLibraryA
InterlockedIncrement
IsBadWritePtr
IsBadReadPtr
HeapValidate
UnhandledExceptionFilter
WaitForSingleObject
CompareStringW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetStdHandle
FlushFileBuffers
SetEndOfFile
GetExitCodeProcess
SetUnhandledExceptionFilter
CreateProcessA
SetConsoleCtrlHandler
HeapAlloc
HeapReAlloc
VirtualAlloc
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA

user32

GetWindowThreadProcessId
GetForegroundWindow
GetWindowTextA
ShowWindow
FindWindowA
SendMessageA

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a205f7c6c0238dc652fc0db4eb5973d0

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 176KB - Virtual size: 174KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 176KB - Virtual size: 174KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 5KB