4c8823fb7d6b059d8732e326b52165ebdeeac2a76dc58a80da78868377b27053

Sharing

Copy URL Twitter E-mail

General

Target

4c8823fb7d6b059d8732e326b52165ebdeeac2a76dc58a80da78868377b27053
Size

576KB
MD5

fd48908df77c7d964f8e7fd481415910
SHA1

5807b072468af87c9eedb5485b4a196164cb869c
SHA256

4c8823fb7d6b059d8732e326b52165ebdeeac2a76dc58a80da78868377b27053
SHA512

83d9d590afaac4e1d412bc28773ef82f0f72e0bee6df5a04512c1fe76dee1b72b2185f655b1d65723b17d028e025485cef27638c6b5d859b005a17f84c679eae
SSDEEP

12288:X6NHRNj15VgvcYgqoomkjQJAegCw9lDn3BTZrLa73R9iwH:uNqOqckBdJpFo

Score

N/A

Malware Config

Signatures

Files

4c8823fb7d6b059d8732e326b52165ebdeeac2a76dc58a80da78868377b27053
.exe windows x86

3125915402387978c1ba47760bec4a48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
Sleep
WriteFile
ResumeThread
GetProcAddress
VirtualAlloc
CloseHandle
SetEvent
VirtualQuery
GetSystemInfo
VirtualProtect
GetModuleHandleA
HeapSize
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RaiseException
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
GetLocaleInfoA
SuspendThread
HeapReAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
SetFilePointer
HeapAlloc
FlushFileBuffers

user32

GetDesktopWindow
LoadIconW
wsprintfA
DestroyWindow
LoadImageA
GetFocus
GetDC

ole32

CoUninitialize

ws2_32

recv

winmm

mciSendCommandA
joyGetThreshold
auxSetVolume

avifil32

AVIStreamCreate

winscard

SCardConnectA

Sections

.text
Size: 544KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 4KB - Virtual size: 942B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 505KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3125915402387978c1ba47760bec4a48

Headers

File Characteristics

Imports

kernel32

user32

ole32

ws2_32

winmm

avifil32

winscard

Sections

.text Size: 544KB - Virtual size: 541KB

.code Size: 4KB - Virtual size: 942B

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 505KB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: 544KB - Virtual size: 541KB

.code
Size: 4KB - Virtual size: 942B

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 505KB

.rsrc
Size: 8KB - Virtual size: 5KB