d3b94e5e930d40312e6954e17ea3443b1a955e83231c14006e5e3ead6d775468

General

Target

d3b94e5e930d40312e6954e17ea3443b1a955e83231c14006e5e3ead6d775468
Size

46KB
MD5

4c4e535646a8ecae004f16a6aea08c18
SHA1

8fbfa591457a74db053390c9a37dae3eea83c015
SHA256

d3b94e5e930d40312e6954e17ea3443b1a955e83231c14006e5e3ead6d775468
SHA512

f77716df62f38803cd3249fba8e0f3bd57e73133d2a9f34f6e3a023d013a0a9724f77e662fcab1c85a4fbd0c13dc5ed13dee705318d2c88e2b65bc53c0286bab
SSDEEP

768:dP+qVoT8NFMeX/BjMkUQIB/c1WHNN5tH6SwBG:JpVq8NFMKO5Zy

Score

N/A

Malware Config

Signatures

Files

d3b94e5e930d40312e6954e17ea3443b1a955e83231c14006e5e3ead6d775468
.exe windows x86

5a3683473b66cdc8626097c681098edf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
ControlService
OpenServiceW
EqualSid
GetUserNameA
LockServiceDatabase
RegCloseKey

kernel32

VirtualFree
IsValidLocale
VirtualAlloc
GetProcessHeap
GetCurrentProcess
GetModuleHandleW
FindNextFileW
ExitProcess
GetFileType

msvcrt

ftell
strcspn
_strnicmp
__getmainargs
__p__commode
_strcmpi
__set_app_type
_fileno
__p__fmode
_beginthread
_wcsdup

gdi32

GdiGetDC
GetStockObject
ExtTextOutA
TextOutA
AngleArc
CreateHalftonePalette
PlayMetaFileRecord
GetClipBox

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoRegisterClassObject
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a3683473b66cdc8626097c681098edf

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

gdi32

version

ole32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 12KB

.rdata Size: 13KB - Virtual size: 45KB

.edata Size: 11KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 12KB

.rdata
Size: 13KB - Virtual size: 45KB

.edata
Size: 11KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 4KB