4699db4fd5b6a2edb7db78ce6cbeb536cc618cca2fadcb4970cb44fc91403c6e

General

Target

4699db4fd5b6a2edb7db78ce6cbeb536cc618cca2fadcb4970cb44fc91403c6e
Size

68KB
MD5

67f549bca9c107b1927607e0f81ccc9a
SHA1

6459fbe812b8502177890fe3aa3634473ec1d53a
SHA256

4699db4fd5b6a2edb7db78ce6cbeb536cc618cca2fadcb4970cb44fc91403c6e
SHA512

28283bbd2363ce1eae04f925e14fc3d2e418e662f769d2f506821ba132fad20d8ada4eaae19075c5ff83a94b69495080e80e2631d71725963f4a499646f0174e
SSDEEP

1536:Qn9x0EoFyUCR8zIu6K+R25+E2QXCbSl7HtU+NWpQp6CvEYx5oSk:4x0EoFyUCCi4+E2QoWHtr6CvEYx5E

Score

N/A

Malware Config

Signatures

Files

4699db4fd5b6a2edb7db78ce6cbeb536cc618cca2fadcb4970cb44fc91403c6e
.exe windows x86

b21a2d17ca1896cc27c9aee1eb8b38a7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
Sleep
GetModuleFileNameA
GetFileAttributesA
ResumeThread
ExitProcess
LoadLibraryA
GetProcAddress
CreateFileA
GetFileSize
ReadFile
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle

shlwapi

PathCombineA

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b21a2d17ca1896cc27c9aee1eb8b38a7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.tls Size: 512B - Virtual size: 2B

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.tls
Size: 512B - Virtual size: 2B