306af63d11bf25716d2763f3fbe7cb2dae4cb7e2e0d1fc18b987ecc311fb308e

General

Target

306af63d11bf25716d2763f3fbe7cb2dae4cb7e2e0d1fc18b987ecc311fb308e
Size

230KB
MD5

720efe9fbcb0bfe38140e6b43ed7fd80
SHA1

5ef50dac64e7b8a373ea8d4c5350470f74095609
SHA256

306af63d11bf25716d2763f3fbe7cb2dae4cb7e2e0d1fc18b987ecc311fb308e
SHA512

b3125eb77de21dc2de03ac628c5ad5f4aeb4ef8d563ae3c4767c699f1318ad8090c8b4ae919f0cb6202f696eabd7fd46123a421c695f27ff3ebfe61641262a36
SSDEEP

6144:UcbERFaWJdxwWn6KwPCX31tkhDgynj8mmD:S7ZxwW6KwPW31tkmc3k

Score

N/A

Malware Config

Signatures

Files

306af63d11bf25716d2763f3fbe7cb2dae4cb7e2e0d1fc18b987ecc311fb308e
.exe windows x86

e13814046735e07be15e273a0a622524

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetProcAddress
WaitCommEvent
LoadLibraryA
VirtualFree
CreatePipe
SizeofResource
GetLogicalDriveStringsA
ResetEvent
GetTempPathA
ExitProcess
lstrcmpiA
DefineDosDeviceW
GetDriveTypeA
GetProcessVersion
GetNamedPipeHandleStateW
HeapWalk
FindClose
GetCommandLineA
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
GetLastError
WriteFile
HeapFree
CloseHandle
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
RtlUnwind
HeapAlloc
SetFilePointer
FlushFileBuffers
HeapReAlloc
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e13814046735e07be15e273a0a622524

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 197KB - Virtual size: 196KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 197KB - Virtual size: 196KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 2KB - Virtual size: 2KB