5490b6a9acf728581c0ed54fc1e73b6b512eacbe2897c65e11918a27e5181e01

General

Target

5490b6a9acf728581c0ed54fc1e73b6b512eacbe2897c65e11918a27e5181e01
Size

3.8MB
MD5

2398437ccc44c1423def15077c7e0b87
SHA1

f6d5d7c86644c30dde8321b73e1714fb1896efe1
SHA256

5490b6a9acf728581c0ed54fc1e73b6b512eacbe2897c65e11918a27e5181e01
SHA512

4982c3e50834aa01a1c80142cc70aa254e9323dfea01c8d140d7ada43d4e3b04dedded5fdb9e9a0c125a08210267d216cd7c48c26e5f1329c0afe24ea9ec698f
SSDEEP

49152:IMzJB2ma97naZW62ilIzaiULfdhcTCWOSqEqLAgbI3iFuvJnjciAtc3LLpG7Uzmp:IMFg9pf62ilh5p6TCTP+nYc3JGT1

Score

N/A

Malware Config

Signatures

Files

5490b6a9acf728581c0ed54fc1e73b6b512eacbe2897c65e11918a27e5181e01
.exe windows x86

7ce88b0085aadb68412a38a8e3323a96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetUserDefaultLangID
GetExitCodeProcess
ReplaceFileW
ReadFile
lstrcatA
lstrlenW
GlobalUnlock
GetSystemDefaultLCID
GetLastError
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
UnregisterWaitEx
OpenFileMappingA
TlsFree
CreateHardLinkA
GetCurrentProcess
LoadResource
GetNumberOfConsoleInputEvents
GlobalFix
EncodePointer
DecodePointer
GetModuleHandleW
ExitProcess
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
HeapSize
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
RtlUnwind
HeapFree
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW

advapi32

SetServiceObjectSecurity
StartServiceCtrlDispatcherW

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 41.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ce88b0085aadb68412a38a8e3323a96

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.data Size: 10KB - Virtual size: 41.5MB

.rsrc Size: 77KB - Virtual size: 76KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 10KB - Virtual size: 41.5MB

.rsrc
Size: 77KB - Virtual size: 76KB