dae1a723eaa08274dd9222efafae92586bda1d4121898d6ba4f96161142696d6

General

Target

dae1a723eaa08274dd9222efafae92586bda1d4121898d6ba4f96161142696d6
Size

224KB
MD5

68f0ecf20ead5ff0916c9450ace0d8a1
SHA1

c1633a4f82788a3a87f0d86514416d55ad46d0e7
SHA256

dae1a723eaa08274dd9222efafae92586bda1d4121898d6ba4f96161142696d6
SHA512

eb286c1080e0c3c46cf8cbb7954faa03f91f522092322a4f64eb1a90e8d2b6f0473f3c6445648e2fdabcf7df03cb4993e40f9568ffc1db1a31e2283a0bd2a502
SSDEEP

6144:AcdjP0QIIFj1rY4L7FdxkwjVfO5L60KsIysVidy:zdjP0yj175fjw5LhFKw0

Score

N/A

Malware Config

Signatures

Files

dae1a723eaa08274dd9222efafae92586bda1d4121898d6ba4f96161142696d6
.exe windows x86

c05e985391bcd7fa3b1b7a3751a01786

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
SetThreadContext
CloseHandle
TerminateProcess
VirtualAllocEx
GetModuleHandleA
lstrcatA
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
CreateFileA
Sleep
GetCurrentProcess
GetCurrentProcessId
WriteFile
GetCommandLineA
GetLastError
HeapFree
MultiByteToWideChar
ExitProcess
WideCharToMultiByte
lstrcmpA
GetProcessHeap
CreateThread
lstrlenA
lstrcpyA
GetVersionExA
GetExitCodeProcess
SetNamedPipeHandleState
DuplicateHandle
CreatePipe
lstrlenW
GetLocalTime
CreateDirectoryA
ReleaseMutex
WaitForSingleObject
TerminateThread
GetExitCodeThread
DeleteFileA
CreateMutexA
lstrcmpiA
GetStartupInfoA
LoadLibraryA
GetThreadContext

user32

wsprintfA
ReleaseDC
GetWindowDC
GetWindowRect
GetDesktopWindow
IsWindowVisible
GetForegroundWindow
EnumWindows
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
SetWindowTextA
ShowWindow
SendMessageA
SetForegroundWindow

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

Sharing

General

Malware Config

Signatures

Files

c05e985391bcd7fa3b1b7a3751a01786

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 6KB

.vmp0 Size: 206KB - Virtual size: 205KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 6KB

.vmp0
Size: 206KB - Virtual size: 205KB