31e3ac6a987b0a9a8c15d59e0661aa6ba3ee18f30226f417760fe60db56c96d0

General

Target

31e3ac6a987b0a9a8c15d59e0661aa6ba3ee18f30226f417760fe60db56c96d0
Size

179KB
MD5

64c9a4900c11ed6b429e61fc83e2571f
SHA1

9102c34c0a1d929ae3a4582767c7acd18f88f2d9
SHA256

31e3ac6a987b0a9a8c15d59e0661aa6ba3ee18f30226f417760fe60db56c96d0
SHA512

2d265a28005dad46015d247a4f297bbb8ab717b531ac33d5c78185477d7b2a1cdf52b86ed51bde4bf0e3d161094cf17a69eeebd208c1986e8d953def29549b7a
SSDEEP

3072:gyLzAIJDn6HC+kYW8Ys0Vw6kK62/qBXyT7CS0r3XLDoPhwv0o+EvQZjWZZ:1HHZn6HNkYBYs0VwFMqooHXsEeD

Score

N/A

Malware Config

Signatures

Files

31e3ac6a987b0a9a8c15d59e0661aa6ba3ee18f30226f417760fe60db56c96d0
.exe windows x86

261b17a011e5d34538dda9208d1ec478

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
ReleaseSemaphore
GlobalSize
GetProcessTimes
FreeLibraryAndExitThread
CopyFileExW
GetCurrentDirectoryA
SetConsoleCursorInfo
_lopen
VirtualQueryEx
OpenFileMappingA
GetThreadLocale
TerminateProcess
GetConsoleTitleW
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
SetStdHandle
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetLastError
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
CloseHandle

user32

DefWindowProcA
GetAncestor
RegisterDeviceNotificationW
BroadcastSystemMessageA
EndPaint
GetWindow
IsRectEmpty
LoadMenuA
GetClipboardFormatNameA
RegisterHotKey
GetPropA

shlwapi

PathAddExtensionA

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

261b17a011e5d34538dda9208d1ec478

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 30KB - Virtual size: 235KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 30KB - Virtual size: 235KB

.rsrc
Size: 2KB - Virtual size: 1KB