1d80ab86cc86a0149aa1be9c319d58471606ef356f5ed0df5fc25b495018a76c

General

Target

1d80ab86cc86a0149aa1be9c319d58471606ef356f5ed0df5fc25b495018a76c
Size

114KB
MD5

039cb4e3ddfbcebfa97b4dcfe91ed750
SHA1

c9499a2e7ab464def20574dc1780dc663a4d63b9
SHA256

1d80ab86cc86a0149aa1be9c319d58471606ef356f5ed0df5fc25b495018a76c
SHA512

910c60b1d56c3ed110f4a310f7cb36fe30d03db5fe67936ef49a402923115ad45c6a317c05bc21322f714d107c9b96b68e26bc5cd736697afe84187dd09f53df
SSDEEP

3072:8YwnVS570M9kdatGCO+xmBc+hMPhPsxT34kv:qVs7nyatGt+SYFc3

Score

N/A

Malware Config

Signatures

Files

1d80ab86cc86a0149aa1be9c319d58471606ef356f5ed0df5fc25b495018a76c
.exe windows x86

3e783184eeaff005d739f64408b19222

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetLastError
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
GetTickCount
GetCommandLineW
UnhandledExceptionFilter

msvcrt

__set_app_type
_controlfp
__p__commode
__setusermatherr
fwprintf
_iob
towupper
_except_handler4_common
?terminate@@YAXXZ
__p__fmode
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset

fvewiz

FveuiWizard
FveuipClearFveWizOnStartup

ole32

CoUninitialize
CoInitialize

shell32

CommandLineToArgvW
ShellExecuteW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e783184eeaff005d739f64408b19222

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

fvewiz

ole32

shell32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 888B

.rsrc Size: 89KB - Virtual size: 88KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 888B

.rsrc
Size: 89KB - Virtual size: 88KB

.reloc
Size: 18KB - Virtual size: 21KB