1ed25c56dafac75bffab48414ac939912d39e56e603dcc47ae393db5b73e1d78

General

Target

1ed25c56dafac75bffab48414ac939912d39e56e603dcc47ae393db5b73e1d78
Size

436KB
MD5

721be291bff28f1350838cb7ff27d449
SHA1

58b181a9af8c24223f2043f54ab986356930f7ad
SHA256

1ed25c56dafac75bffab48414ac939912d39e56e603dcc47ae393db5b73e1d78
SHA512

98aaea74c20ef1988495bd4520a571ebf513401ecbbd8b35d62fd614b05443b51c49cc9d00d7cc30d5b2d2f98feb7dd31bcdc51604143d0850635435b236fe24
SSDEEP

12288:EnAa1vQdD32DnzdxY3xJIRHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHX:Ce3UkPa

Score

N/A

Malware Config

Signatures

Files

1ed25c56dafac75bffab48414ac939912d39e56e603dcc47ae393db5b73e1d78
.exe windows x86

9dbaca544fa3aa001c5943ac9fe3e4da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
QueryPerformanceCounter
WriteFile
lstrcmpiA
GetModuleHandleW
CloseHandle
LoadResource
HeapAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
ExitProcess
HeapCreate
GetModuleHandleA
GetProcAddress
GetEnvironmentStringsW
MultiByteToWideChar
LCMapStringA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
VirtualFree
HeapFree
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA

user32

SetParent
MessageBoxA
RegisterClassExA
GetClientRect
PostQuitMessage
GetSystemMetrics

gdi32

GetDeviceCaps
TextOutA
Ellipse

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9dbaca544fa3aa001c5943ac9fe3e4da

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 9KB

.rsrc Size: 396KB - Virtual size: 395KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 9KB

.rsrc
Size: 396KB - Virtual size: 395KB