4d3c27e0b57cce2e3edf4fcbc10784f31f14eb7f66e9ae5c7cd82cb9de50b2fb

General

Target

4d3c27e0b57cce2e3edf4fcbc10784f31f14eb7f66e9ae5c7cd82cb9de50b2fb
Size

100KB
MD5

706cdf68cc4da54d6d584747f4eb661e
SHA1

3f1ffaabe868403c927413274fff63e2dd2a89f8
SHA256

4d3c27e0b57cce2e3edf4fcbc10784f31f14eb7f66e9ae5c7cd82cb9de50b2fb
SHA512

ce7ee00a923e005a99bd982e6d4f448caf5d02a8193b1b5a1e6eac7ceebb0b0b2d451475b9a1551cc5b8b074dd7a176e47246fbeba0e2b096a801b5b050b08de
SSDEEP

3072:EEC8V0yIB5wDR3unIGBmdDQ+rI5zlalX+wx8eV:EqeyIBER3unzciQXdD

Score

N/A

Malware Config

Signatures

Files

4d3c27e0b57cce2e3edf4fcbc10784f31f14eb7f66e9ae5c7cd82cb9de50b2fb
.exe windows x86

5607ee32a239a4c1df03b47c619b2273

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetModuleFileNameW
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
CreateMutexW
GetLastError
GetCurrentProcess
CloseHandle
UnhandledExceptionFilter

msvcrt

__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
wcsrchr
_wcsicmp

difxapi

DriverPackageUninstallW
DriverPackagePreinstallW
DriverPackageInstallW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

^T
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5607ee32a239a4c1df03b47c619b2273

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

difxapi

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

^T Size: 89KB - Virtual size: 92KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

^T
Size: 89KB - Virtual size: 92KB