8de1463d065dbdc9a19bebc408e6842c76a78becc3461850480fe2595263ded9

General

Target

8de1463d065dbdc9a19bebc408e6842c76a78becc3461850480fe2595263ded9
Size

132KB
MD5

fbba9392ea18d9d14ebcf1bde8e93815
SHA1

f31f74bb604c653afce03c6e701200a5fe598742
SHA256

8de1463d065dbdc9a19bebc408e6842c76a78becc3461850480fe2595263ded9
SHA512

dfdeba7871c85ffc9a2f64a9d93c9b3614f7a7ca142fe5e022940b4f325dfa3fe0c868f9009aba177c4fe29107312129532e06267f2ee7c82d6e80bff83891be
SSDEEP

1536:PE0TBpFLiYURYB6Zvb+Cs4GYCLCy88RLBfoICS4A3KkFzl8Zn:c0cigZT+sGYkC6tzJK4zl8Zn

Score

N/A

Malware Config

Signatures

Files

8de1463d065dbdc9a19bebc408e6842c76a78becc3461850480fe2595263ded9
.exe windows x86

fa47b293cce86e2d0a3c542d02e01364

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
GetStdHandle
ReadFile
SetFilePointer
GetFileSize
WriteFile
SetEndOfFile
MoveFileW
DeleteFileW
CloseHandle
lstrcatW
lstrcpynW
GetLastError
CreateFileW
Sleep
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
SetStdHandle
GetLocaleInfoW
GetACP
GetOEMCP

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ahagysk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fa47b293cce86e2d0a3c542d02e01364

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 23KB

.rsrc Size: 52KB - Virtual size: 52KB

ahagysk Size: - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 23KB

.rsrc
Size: 52KB - Virtual size: 52KB

ahagysk
Size: - Virtual size: 4KB