4dafb0843568433c534e45fe31d631f6e23fc91187c892b5d5942031b84d08f5

General

Target

4dafb0843568433c534e45fe31d631f6e23fc91187c892b5d5942031b84d08f5
Size

273KB
MD5

66feca216cd72c8d3dc5e0b95f59fc13
SHA1

9470e9dabe88e821375faaa37690e9a1bb52f284
SHA256

4dafb0843568433c534e45fe31d631f6e23fc91187c892b5d5942031b84d08f5
SHA512

5d96a311a575e536088e7918d0398254dc4072e28ebca6d61457fdd7a20a37504a252307487cf5fb81b18ca0f6731a953541cd89f63c486719412befb76655ad
SSDEEP

6144:gjrDtkuLR9cPQTB5Fh6JCO9YxrJaQwNp19Rr1:etkuLPcPQl5FfOVQMvPJ

Score

N/A

Malware Config

Signatures

Files

4dafb0843568433c534e45fe31d631f6e23fc91187c892b5d5942031b84d08f5
.exe windows x86

bcf5f1774174a47f385e0376d44c6c80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
TlsSetValue
SetLastError
VirtualProtectEx
GetProcessTimes
GetProcessHeap
UnlockFileEx
GetCurrentDirectoryW
FindCloseChangeNotification
CopyFileW
SetFileTime
LockFileEx
FileTimeToDosDateTime
ReadFileEx
InterlockedExchange
LoadLibraryExW
VirtualAllocEx
ReadFileScatter
SizeofResource
VirtualAlloc
DeleteFileW
GetLocalTime
SetHandleCount
lstrlenW
GlobalFindAtomW
FindNextChangeNotification
GetProcAddress
LoadLibraryA
CreateThread
GetExitCodeThread
SleepEx
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
CloseHandle
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
SetFilePointer
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

Sections

.text
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcf5f1774174a47f385e0376d44c6c80

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 257KB - Virtual size: 257KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 257KB - Virtual size: 257KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 7KB - Virtual size: 7KB