5021a3798727345f74d32b244cce3d2374f0b7dc88656db7c8446853589c46c7

General

Target

5021a3798727345f74d32b244cce3d2374f0b7dc88656db7c8446853589c46c7
Size

128KB
MD5

3278c277dd6d9447e58b559feb44760e
SHA1

797b68925b8ca4cc24659249db1b7f0c80c3a253
SHA256

5021a3798727345f74d32b244cce3d2374f0b7dc88656db7c8446853589c46c7
SHA512

9ce79c36d70b984e49d53c7a4ab008ecf68e9b78f196533d421cb83d0b59b4cb52466f8a9af1c357482515e9a0850e56d77c4bcd0b2e14ad572ac67fd6f73000
SSDEEP

1536:OE0TBpFLiYURYB6Zvb+Cs4GYCLCy88RLBf1ICS4A3KkFzl8ZnsOh:v0cigZT+sGYkC6tOJK4zl8ZnsOh

Score

N/A

Malware Config

Signatures

Files

5021a3798727345f74d32b244cce3d2374f0b7dc88656db7c8446853589c46c7
.exe windows x86

fa47b293cce86e2d0a3c542d02e01364

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
GetStdHandle
ReadFile
SetFilePointer
GetFileSize
WriteFile
SetEndOfFile
MoveFileW
DeleteFileW
CloseHandle
lstrcatW
lstrcpynW
GetLastError
CreateFileW
Sleep
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
SetStdHandle
GetLocaleInfoW
GetACP
GetOEMCP

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fa47b293cce86e2d0a3c542d02e01364

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 23KB

.rsrc Size: 8KB - Virtual size: 24KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 23KB

.rsrc
Size: 8KB - Virtual size: 24KB