f52e9051e15c25fc3ed5e86168cf79e8e1f5f71b336878044892c733d60d89fa

General

Target

f52e9051e15c25fc3ed5e86168cf79e8e1f5f71b336878044892c733d60d89fa
Size

280KB
MD5

97c9fa3b3153cadbe647ae702bd2ba79
SHA1

6d5418b379a612f9fa09f928b8a30ce44e2388c6
SHA256

f52e9051e15c25fc3ed5e86168cf79e8e1f5f71b336878044892c733d60d89fa
SHA512

1df977afbee7fb415f66003883192d66e6520e25fbcf6382e08b8f943b00b6d7b3a1edee7f0e22d202829424aa6a854e22e5f4dd70d23e0b0238b969cd2e98bb

Score

N/A

Malware Config

Signatures

Files

f52e9051e15c25fc3ed5e86168cf79e8e1f5f71b336878044892c733d60d89fa
.exe windows x86

76547223642d5b091bb46a24dd806e25

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceNamesW
SetDefaultCommConfigA
IsBadHugeReadPtr
LoadResource
_lwrite
SleepEx
ConnectNamedPipe
GetModuleHandleW
ReadConsoleW
GetPriorityClass
GlobalAlloc
Sleep
GetPrivateProfileStructW
GetSystemPowerStatus
CreateSemaphoreA
lstrlenW
RaiseException
FreeLibraryAndExitThread
GetLastError
IsValidCodePage
GetLocalTime
LoadLibraryA
BuildCommDCBAndTimeoutsW
WaitCommEvent
CreateMutexA
FreeEnvironmentStringsW
VirtualProtect
GetCurrentDirectoryA
FindAtomW
lstrcpyA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapFree
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetModuleHandleA
LCMapStringA
LCMapStringW

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76547223642d5b091bb46a24dd806e25

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 103KB - Virtual size: 102KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 5KB - Virtual size: 674KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 103KB - Virtual size: 102KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 5KB - Virtual size: 674KB

.rsrc
Size: 12KB - Virtual size: 11KB