125f09b9ab652159eed4f13772bbf108b70165552b0759113b41c774c5226a12

General

Target

125f09b9ab652159eed4f13772bbf108b70165552b0759113b41c774c5226a12
Size

589KB
MD5

507032cab28c3fb36a3312b071eff780
SHA1

ffd62dbcc5922e5743a6c667a2199d7ed616e139
SHA256

125f09b9ab652159eed4f13772bbf108b70165552b0759113b41c774c5226a12
SHA512

034c26ef24e8a60e3d4e6ccc79df758dfcc7423faa5ff5e835e340b2d8f8578d6b0de680a693e230a846d71c594f66bcee9cfb44a23a33162861e71b712a8a48
SSDEEP

12288:IqlW3Pca7RrU1Z5abqR5Q4Qt1Pfpc00/Esll5uGLCf:IGYPcX16C1UnO0hwQGLC

Score

N/A

Malware Config

Signatures

Files

125f09b9ab652159eed4f13772bbf108b70165552b0759113b41c774c5226a12
.exe windows x64

222c2ab4ca1e4aef00edd5d9cdf258b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WinExec
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
HeapSetInformation
HeapCreate
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 556KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

222c2ab4ca1e4aef00edd5d9cdf258b1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 556KB - Virtual size: 2.4MB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 556KB - Virtual size: 2.4MB