f96a805fd84ae7470fbb96cc015117dd229261a4744cf470a9ea030284d08f22

General

Target

f96a805fd84ae7470fbb96cc015117dd229261a4744cf470a9ea030284d08f22
Size

448KB
MD5

533bbc43543fe577c08842ee7cc8f866
SHA1

2958c7f8a0503da1b77d6ae7e6d9ec14d68fdb1f
SHA256

f96a805fd84ae7470fbb96cc015117dd229261a4744cf470a9ea030284d08f22
SHA512

2ea4d83954db931f5be87dbb01fc9613dffbde79fb39a2c07f064ee17ed9c88632cf9c101241c732007306b2b3117bb7e967ffcb0108ea090158b130da0ab8da
SSDEEP

6144:rCbVHU3oGaAcSD3Dty9ZCOfVavfqfS5cNIdVQXciVKGhiq7+j2RZ6r1Z4:rg03ihSDTtyu2Ivz5cN8ziVXh9+SUS

Score

N/A

Malware Config

Signatures

Files

f96a805fd84ae7470fbb96cc015117dd229261a4744cf470a9ea030284d08f22
.exe windows x86

593a04e0f6d9545ea6339e89432cb32d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateMutexA
GetCurrentProcess
lstrcatA
lstrcpyA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
LoadLibraryA
WriteFile
CreateFileA
Sleep
GetModuleFileNameA
GetSystemDirectoryA
ExitProcess
lstrcmpA
ReadProcessMemory
ReadFile
GetFileSize
GetProcAddress
CloseHandle
lstrlenA
DeleteFileA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

GetUserNameA
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.umap
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 344KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

593a04e0f6d9545ea6339e89432cb32d

Headers

File Characteristics

Imports

kernel32

advapi32

shell32

Sections

.text Size: 32KB - Virtual size: 31KB

.umap Size: 68KB - Virtual size: 65KB

.rsrc Size: 344KB - Virtual size: 340KB

.text
Size: 32KB - Virtual size: 31KB

.umap
Size: 68KB - Virtual size: 65KB

.rsrc
Size: 344KB - Virtual size: 340KB