ab00c6e43ddaeadfaff0161338b6a9ae042125b8abaede03bcc2ff0a1f93370e

General

Target

ab00c6e43ddaeadfaff0161338b6a9ae042125b8abaede03bcc2ff0a1f93370e
Size

27KB
MD5

4f84b9d58a966d0331938847e8965f70
SHA1

d960fafa82d76ecc8e485dd7e00c2a7a5dd126b9
SHA256

ab00c6e43ddaeadfaff0161338b6a9ae042125b8abaede03bcc2ff0a1f93370e
SHA512

32e328b419edee4d581df4f54385f5d7f4ea5f26199bc1c86e8ab79aa4e652ea52c5872c05599424006b547b98205c070101c6f7ed71d35b943b0e6172d64653
SSDEEP

768:jIgN0RDau0T8WRb3zKR8/aAxNlRnhkoiHlxQL:jIgNUau0oobmS/NhhkoiHlc

Score

N/A

Malware Config

Signatures

Files

ab00c6e43ddaeadfaff0161338b6a9ae042125b8abaede03bcc2ff0a1f93370e
.exe windows x86

8c72aee2eabb36ff7be0f7a9f695344d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCommandLineW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

user32

AllowSetForegroundWindow

msvcrt

memset
__getmainargs
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit

ntdll

WinSqmAddToStream

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

shell32

ShellExecuteExW

shlwapi

PathGetArgsW
StrCmpW
UrlGetPartW

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c72aee2eabb36ff7be0f7a9f695344d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

ntdll

ole32

shell32

shlwapi

oleaut32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 17KB - Virtual size: 20KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 17KB - Virtual size: 20KB