49ec7f745d0be0231f036d4aca5feb776c46fd5028bd64d03a89408ac51058ee

General

Target

49ec7f745d0be0231f036d4aca5feb776c46fd5028bd64d03a89408ac51058ee
Size

72KB
MD5

331c977620cb6cc8353799d5402c66e0
SHA1

548c22f6145ad8ef2d772a9e9537b33812a9f086
SHA256

49ec7f745d0be0231f036d4aca5feb776c46fd5028bd64d03a89408ac51058ee
SHA512

9dfe4fe9db6ca93eda1e6139a5dabb6b678ba1aa5335e4656383bc98ab08dfa8500aba710152726ede172d4af1bba8cd597f686844a722578d43525912e7f55a
SSDEEP

768:BUNE5v9m/uI30lJBkvTeCnvjBBRwTJMhcqQDujrGx0KI:BUam/r3+WviQ9BRJrq

Score

N/A

Malware Config

Signatures

Files

49ec7f745d0be0231f036d4aca5feb776c46fd5028bd64d03a89408ac51058ee
.exe windows x86

8ae23c0e23439b8f59a5785b5efd4855

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
GetLastError
GetProcAddress
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

SetWindowLongW
MessageBoxW
PostMessageW
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
CreateWindowExW
RegisterClassW
LoadCursorW
LoadIconW
DefWindowProcW

msvcrt

?terminate@@YAXXZ
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_vsnwprintf
_initterm

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

otaypgu
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8ae23c0e23439b8f59a5785b5efd4855

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 952B

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 32KB - Virtual size: 32KB

otaypgu Size: - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 952B

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 32KB - Virtual size: 32KB

otaypgu
Size: - Virtual size: 4KB