8deadadcc61979ff05baf1b863925f42d7eeaccfb58c480554683a39c5111934

General

Target

8deadadcc61979ff05baf1b863925f42d7eeaccfb58c480554683a39c5111934
Size

71KB
MD5

663faa665864733b617212868e266ec0
SHA1

dd073251d0a54c1a5004afadc7a7f1bd13c61c6a
SHA256

8deadadcc61979ff05baf1b863925f42d7eeaccfb58c480554683a39c5111934
SHA512

572bcae2d20a837058dc079d29a5b21c5352847403f6f122a284419c0629d8531a6101c71b13d41cfa3535271b9dfdc33c533c078d5eb4b28abfc58ab84ef100
SSDEEP

768:9oTJBeLl09OSqSLPy8q/CCyCJmXbD43ZI4gu4yiCPNPJx8YIOnYzr3g7QRYs8N:9u7Ol09OSdRCYD43Zz54Q19FUR8N

Score

N/A

Malware Config

Signatures

Files

8deadadcc61979ff05baf1b863925f42d7eeaccfb58c480554683a39c5111934
.exe windows x64

5e9a695b8098cba74500f488150dad6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_c_exit
_XcptFilter
__C_specific_handler
isalnum
isalpha
islower
_atoi64
atol
_exit
memset
strchr
memcpy
??2@YAPEAX_K@Z
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
__set_app_type
__dllonexit
_onexit
??3@YAXPEAX@Z
_strnicmp

advapi32

RegCloseKey
RegQueryValueExA

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GlobalFlags
_lopen
GetStartupInfoA
_hread
_lclose
LocalAlloc
LocalFree
lstrcmpiA
GlobalUnlock
GlobalAlloc
GlobalLock
GlobalFree
GetFileAttributesA
SetFileAttributesA
DeleteFileA
GetSystemDirectoryA
GetWindowsDirectoryA
lstrcatA
_llseek
FindNextFileA
IsDBCSLeadByte
lstrlenA
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
WideCharToMultiByte
GetVersionExA
lstrcpyA
FindClose
FindFirstFileA

user32

PostQuitMessage
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
SendMessageA
LoadStringA
CharPrevA
wsprintfA
GetSystemMetrics
CharNextA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e9a695b8098cba74500f488150dad6d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB