44b5e26302c8265d0e40f6cb2d74740681118c03a58dbd1254e3833304ad369e

General

Target

44b5e26302c8265d0e40f6cb2d74740681118c03a58dbd1254e3833304ad369e
Size

216KB
MD5

63caa67de50f6d0379c7f9d787d9e1ac
SHA1

03c40b7022b2eba29f9d78a4cfec68b811bc81ca
SHA256

44b5e26302c8265d0e40f6cb2d74740681118c03a58dbd1254e3833304ad369e
SHA512

9da13528167cdedf514be41bc5014b375c1c25c569090d50cc14f3b828310383ee860b846340e9fe37a35c6d24648c2304ab2e2ab15e40a29eead4ed4e7d1097
SSDEEP

3072:AcNnXuE5IbfHuZRWsxayWy5i/hEd7pVmA74eKmeK1Bnyo2wy5HLeGTpb:9NnXzq7+WMjCid7p0a/eKLclHLeSpb

Score

N/A

Malware Config

Signatures

Files

44b5e26302c8265d0e40f6cb2d74740681118c03a58dbd1254e3833304ad369e
.exe windows x86

a8aef5bce9465c2135139e9c3f029849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetLocaleInfoW
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetLastError
CloseHandle
WriteFile
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetProcAddress
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
GetACP
GetOEMCP
LoadLibraryA
CreateFileA
SetEnvironmentVariableA

shell32

ShellExecuteA

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8aef5bce9465c2135139e9c3f029849

Headers

File Characteristics

Imports

kernel32

shell32

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 20KB - Virtual size: 22KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 20KB - Virtual size: 22KB

.rsrc
Size: 32KB - Virtual size: 32KB