ee684eceb03c0b79a7a0044d7d49213fc6ea1660287bd31faa48e14f8f8a364b

General

Target

ee684eceb03c0b79a7a0044d7d49213fc6ea1660287bd31faa48e14f8f8a364b
Size

352KB
MD5

f9cc0aea3f4d507684af2a2128c93130
SHA1

55ab8cf1d5d574f50191d97a05bc2d9f59e43eb8
SHA256

ee684eceb03c0b79a7a0044d7d49213fc6ea1660287bd31faa48e14f8f8a364b
SHA512

94a4912a0fa9e0e4caa0ac618f44074bdc5cb283d8ff8d48acaf73f1144a9094a8818d66ae23dae768d9e4af9cef8eea920e922c1a558366a98610fac3fbd71b
SSDEEP

6144:nn8/94bubVFB4rQiQ8/PfJapYlt+yQtXDCsxj2X5uven:nO9NV/4rQilapJtTx129n

Score

N/A

Malware Config

Signatures

Files

ee684eceb03c0b79a7a0044d7d49213fc6ea1660287bd31faa48e14f8f8a364b
.exe windows x86

4cd7b7b61531731640dec0519cb9676d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetSystemDirectoryA
RemoveDirectoryA
LocalAlloc
VirtualProtect
GetCurrentDirectoryA
GetTempPathA
LocalFree
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
HeapFree
WideCharToMultiByte
GetTimeZoneInformation
HeapAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapSize
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cd7b7b61531731640dec0519cb9676d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 153KB - Virtual size: 153KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 13KB - Virtual size: 44KB

.rsrc Size: 161KB - Virtual size: 161KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 153KB - Virtual size: 153KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 13KB - Virtual size: 44KB

.rsrc
Size: 161KB - Virtual size: 161KB

.reloc
Size: 6KB - Virtual size: 6KB