94bd89f22a8eff71138fc466c895a353c1438b32f17657ff007e720099071abe

General

Target

94bd89f22a8eff71138fc466c895a353c1438b32f17657ff007e720099071abe
Size

181KB
MD5

f7a214f02a7bbb52e14ec4b3cdccfec7
SHA1

9e016a8b683931ae2f0af87481176082a409fb62
SHA256

94bd89f22a8eff71138fc466c895a353c1438b32f17657ff007e720099071abe
SHA512

3e5f1deb8467c84ae3263fa1bca9a97871414e58eabb3b4116a0a1960dd33d53142dea231d0542bb403905d35d091749234975ee37d7f5422f49d2931aa79c14
SSDEEP

3072:RI9halGvX9yqpBgZLSicyj625DfhigoxI8dfFGvaeLS2k92e55:mvXvgqLfirbuG8dNGfW2/ev

Score

N/A

Malware Config

Signatures

Files

94bd89f22a8eff71138fc466c895a353c1438b32f17657ff007e720099071abe
.exe windows x86

db256c17358abab2beeb69af9b8d5754

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
ExitProcess
CreateFileW
GetModuleHandleA
VirtualAlloc
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleFileNameA
GetLastError
ResumeThread
WriteProcessMemory
GetThreadContext
lstrcpyA
GetModuleFileNameW
GetSystemTime
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
GetSystemInfo

user32

CharUpperA
GetActiveWindow
GetDC
CharLowerA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db256c17358abab2beeb69af9b8d5754

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 48KB

.rsrc Size: 4KB - Virtual size: 680B

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 48KB

.rsrc
Size: 4KB - Virtual size: 680B