8617f6ad6b8ffcb76a49b3477ea060b4037519977399561c989c3ff1d8c28457

General

Target

8617f6ad6b8ffcb76a49b3477ea060b4037519977399561c989c3ff1d8c28457
Size

105KB
MD5

406080d827f5c7002b51f2bc8bd7be60
SHA1

c4c18f6377c207ef8f74652e24a518b4cf79e38d
SHA256

8617f6ad6b8ffcb76a49b3477ea060b4037519977399561c989c3ff1d8c28457
SHA512

687505524b2df57bf7c7de0c77be422f928f17e046a0089555700cfc0c4df3f3e69dc0e50f9e7b78b07a4ef90f3f67ad810af4743ee12ed6397d6530b6a9b2d6
SSDEEP

3072:/ln5fxBggbjaPFdUGB96uARdFQnLUCiql:/lnZIg/el0Qhl

Score

N/A

Malware Config

Signatures

Files

8617f6ad6b8ffcb76a49b3477ea060b4037519977399561c989c3ff1d8c28457
.exe windows x86

2e80c00d68efcf6d11ca6cbbc73bd947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2e80c00d68efcf6d11ca6cbbc73bd947

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 86KB - Virtual size: 86KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 10KB - Virtual size: 13KB

.text
Size: 86KB - Virtual size: 86KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 10KB - Virtual size: 13KB