17241caa73aa057e757dc0aa739313b48a5b215205f95216248e829188291ad5

General

Target

17241caa73aa057e757dc0aa739313b48a5b215205f95216248e829188291ad5
Size

199KB
MD5

34046ae0036100960ee425b6c0e38eca
SHA1

454a3de0412064338511006ceab67c72c5bedeba
SHA256

17241caa73aa057e757dc0aa739313b48a5b215205f95216248e829188291ad5
SHA512

184d1bec2dea5df6cd1c05cdb6198bc22fa15fa21468a071f7c4ffceda9e73441a11f7a9485240ca8b37abda8cf0641853f0c018189b2444ad9a82c29c3659ad
SSDEEP

3072:teeaLPZ4X5V0g1ViYCJxUfl4PjS4xR/tUN0WxNmftmacfl0eHb0FLmCoi4T0n97t:gTSJ+3JGflUSSq4t/Ud0oLL09p

Score

N/A

Malware Config

Signatures

Files

17241caa73aa057e757dc0aa739313b48a5b215205f95216248e829188291ad5
.exe windows x86

b6663318afa829c93a7c00fe3ce133db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetProcAddress
LoadLibraryA
GetLocaleInfoA
GetModuleHandleA
LCMapStringA
GetLastError
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
GetVersionExA
WriteFile
FlushFileBuffers
ExitProcess
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
HeapAlloc
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualProtect
GetSystemInfo
HeapSize
CloseHandle

user32

LoadMenuW

gdi32

EqualRgn
GetTextExtentExPointW
GetDCBrushColor
PolyTextOutW
SetTextColor
SetEnhMetaFileBits
CloseMetaFile
EndPath
SetWorldTransform
GetWorldTransform
GdiGetDevmodeForPage
ExtEscape
GetMetaFileBitsEx
CreatePolyPolygonRgn
WidenPath
PolyTextOutA
CreateHatchBrush
GetNearestColor
RemoveFontResourceExW

Sections

.text
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b6663318afa829c93a7c00fe3ce133db

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 189KB - Virtual size: 189KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 243KB

.text
Size: 189KB - Virtual size: 189KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 243KB