d7b4ed2c55e4a6c235e0468f2a85d0d69bb8b1c11eee37ca4c745e0c281bc9cc

General

Target

d7b4ed2c55e4a6c235e0468f2a85d0d69bb8b1c11eee37ca4c745e0c281bc9cc
Size

236KB
MD5

7285cb355c079fad3765a9abcd00c198
SHA1

d5946d3d3054593d844efd9c3e81b0511f38509e
SHA256

d7b4ed2c55e4a6c235e0468f2a85d0d69bb8b1c11eee37ca4c745e0c281bc9cc
SHA512

981c2872b59e29865233b14b39d4efa9f88e1be6f03c70063b192cee93ba62e0c55ec1253ecb2b24e8bd4eb5df6bd1a8aa4b4e1dbaf85cc2aa438c7f050672ac
SSDEEP

3072:Z94lGBI7c7AMiDW5Dt3SK6i6/2o3yVGNDeROYCCCkggP/TDGt+QkW9CYJj8nrff6:n4AI7c603nJaqVGER19u4QkJYjyQeQ+G

Score

N/A

Malware Config

Signatures

Files

d7b4ed2c55e4a6c235e0468f2a85d0d69bb8b1c11eee37ca4c745e0c281bc9cc
.exe windows x86

15ece3333ca33b65d5b6dd71f375508b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
EnterCriticalSection
GetCommTimeouts
GetPrivateProfileSectionA
SetSystemTimeAdjustment
GlobalWire
GetConsoleScreenBufferInfo
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
Sleep
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
LoadLibraryW
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
IsProcessorFeaturePresent
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15ece3333ca33b65d5b6dd71f375508b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 6.7MB

.rsrc Size: 153KB - Virtual size: 153KB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 6.7MB

.rsrc
Size: 153KB - Virtual size: 153KB

.reloc
Size: 17KB - Virtual size: 17KB