c8b2f9f8b5149d982d0697b8008346783c3ca10219b4901ecfc48b097f53918f

Sharing

Copy URL Twitter E-mail

General

Target

c8b2f9f8b5149d982d0697b8008346783c3ca10219b4901ecfc48b097f53918f
Size

480KB
MD5

12dc18d836acd51deae26501b7900015
SHA1

381541cc772b824d299b999f470b332276f6da27
SHA256

c8b2f9f8b5149d982d0697b8008346783c3ca10219b4901ecfc48b097f53918f
SHA512

b1c2b10199802c5332b2d3e752fd99de9b1a7fc59ab218cabdbce892ac90cd6610459ca9141d1ff253050037098f8c3ba1408b3b64b79119eb8c82bd837e4fec
SSDEEP

6144:SIT3VuVgbO492VO2liJbN0l0kJ8XRJV/MK+BHGPLwAXbFccg:HT3gVgr92YqiJRkJ8XR2BHGL6T

Score

1^/10

Malware Config

Signatures

Files

c8b2f9f8b5149d982d0697b8008346783c3ca10219b4901ecfc48b097f53918f
.exe windows x86

6f9452124d67dba27333506b70501d83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
DebugBreak
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
lstrlenA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
ExitProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetModuleFileNameW
VirtualQuery
FreeLibrary
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
RtlUnwind
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.textbss
Size: - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 352KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f9452124d67dba27333506b70501d83

Headers

File Characteristics

Imports

kernel32

Sections

.textbss Size: - Virtual size: 166KB

.text Size: 352KB - Virtual size: 349KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 8KB - Virtual size: 14KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 48KB - Virtual size: 48KB

.textbss
Size: - Virtual size: 166KB

.text
Size: 352KB - Virtual size: 349KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 8KB - Virtual size: 14KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 48KB - Virtual size: 48KB