dad62733462ad9af25b0d3594c88b56877d96c7f4646e9d960600f07b3d69122

General

Target

dad62733462ad9af25b0d3594c88b56877d96c7f4646e9d960600f07b3d69122
Size

557KB
MD5

47b4b0601b0e723ba33a89729dfe6799
SHA1

d0db4b8813e6af8d501b877dff20b01c70320272
SHA256

dad62733462ad9af25b0d3594c88b56877d96c7f4646e9d960600f07b3d69122
SHA512

103342d70f01ef931fc148821cb2e2f6217e098057d0e1a20743241e51cbb08e42d2438538fca021f0098c0830f45471f7973e83f6afbab01f31f6330c4d934a
SSDEEP

12288:+FnYMtWj3u2c826hO8hkY58qmxhuHV7xRSfMIKWNmdmAQTxJM0XYbIcY6m9alI+8:+S/j3uJZ8hkY58qmxhuHV7xRSfMIKWNT

Score

N/A

Malware Config

Signatures

Files

dad62733462ad9af25b0d3594c88b56877d96c7f4646e9d960600f07b3d69122
.exe windows x86

e21234d0b5a0ae3c38b53c634c5de93c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
CreateThread
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
EncodePointer
DecodePointer
HeapAlloc
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e21234d0b5a0ae3c38b53c634c5de93c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 78KB - Virtual size: 77KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 456KB - Virtual size: 455KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 78KB - Virtual size: 77KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 456KB - Virtual size: 455KB

.reloc
Size: 5KB - Virtual size: 4KB