fd1d93840bab682da0de42bfa59aebf370de4cf115b77d574d64c384b23e6f9e

General

Target

fd1d93840bab682da0de42bfa59aebf370de4cf115b77d574d64c384b23e6f9e
Size

48KB
MD5

6444b0cd1436a52299813d36678a9361
SHA1

e5512e55a9d7627384695c2cb705ec903fc63d8c
SHA256

fd1d93840bab682da0de42bfa59aebf370de4cf115b77d574d64c384b23e6f9e
SHA512

c8db0826f474b8074ce2e73ab4b619e40dc07a33fdc72a301d6d8b444d70103cf7faef5546af5bac9d4908bf99d21f5e6d3f3d3cc7e66c85c37d0c9592fc9ae0
SSDEEP

768:N/KTWXXUWybDNyxeNPudQEkmGBLlJ+83y8rwLf4wZnjdzF23TRGx:zUtbDNyxpHkmG9lJ+8P8TTdjdzF8T

Score

N/A

Malware Config

Signatures

Files

fd1d93840bab682da0de42bfa59aebf370de4cf115b77d574d64c384b23e6f9e
.exe windows x86

999a3388414bfc3fd4f4e14cafe54487

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

IsLFNDrive
DragFinish
DuplicateIcon
SHDefExtractIconW

kernel32

LoadLibraryA
LocalFree
GetCurrentProcessId
FindResourceA
LeaveCriticalSection
DeleteCriticalSection
GetLastError
SetUnhandledExceptionFilter
TerminateProcess
HeapFree
MultiByteToWideChar
EnumResourceTypesA
UnhandledExceptionFilter
GetModuleHandleA
SizeofResource
LockResource
SetConsolePalette
EnterCriticalSection
HeapSize
InterlockedIncrement
InitializeCriticalSection
ExitProcess
FreeLibrary
EnumResourceNamesA
SetLastError
EndUpdateResourceA
GetSystemTimeAsFileTime
HeapAlloc
WriteFile
CloseHandle
GetCurrentProcess
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
SetConsoleWindowInfo
GetProcAddress
InterlockedDecrement
LoadResource
WideCharToMultiByte
Sleep
FreeResource
VirtualAlloc

Sections

.textbss
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

999a3388414bfc3fd4f4e14cafe54487

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

Sections

.textbss Size: - Virtual size: 52KB

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 29KB - Virtual size: 28KB

.rsrc Size: 2KB - Virtual size: 2KB

.debug Size: 12KB - Virtual size: 12KB

.textbss
Size: - Virtual size: 52KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 2KB - Virtual size: 2KB

.debug
Size: 12KB - Virtual size: 12KB