5cba294be4df144c24eb7610e04b718c232d2a3022e28566c6b0f266a25d1e59

General

Target

5cba294be4df144c24eb7610e04b718c232d2a3022e28566c6b0f266a25d1e59
Size

25KB
MD5

61ce08915350c69ccee4f24284b8419a
SHA1

81c648c65888afd55dcacfaed04444534557b603
SHA256

5cba294be4df144c24eb7610e04b718c232d2a3022e28566c6b0f266a25d1e59
SHA512

170b37ed7319ad7784ef7cfdf338b7667787d69f6f6cddc738674770287bac2e60004167080d5477187603c1fdf22e8e021aeda14ebefa6356c90df4a5fc331d
SSDEEP

384:L9DCOTEMzV5WwWXRTWNvCAJbSKmFeKVKgsNb2ohZW4mT4P6TpD6IBIA9gMKZ2:gOVRwvICe5oogut/wFxIA9gTZ

Score

N/A

Malware Config

Signatures

Files

5cba294be4df144c24eb7610e04b718c232d2a3022e28566c6b0f266a25d1e59
.exe windows x86

256cd8cedfd4fcb3bc9db32e27e5923a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

user32

CreateWindowExW
DefWindowProcW
RegisterClassExW
GetDesktopWindow
SetForegroundWindow

msvcrt

_wcmdln
_except_handler4_common
?terminate@@YAXXZ
_controlfp
__set_app_type
__p__fmode
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsicmp
memset
__p__commode
__setusermatherr
_amsg_exit
_initterm

shell32

CommandLineToArgvW

pcaui

PcaLaunchApplicationWithConsent
PcaPersistSettingsAndLaunchApplication

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

256cd8cedfd4fcb3bc9db32e27e5923a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

shell32

pcaui

Sections

.text Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 896B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 17KB - Virtual size: 20KB

.text
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 896B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 17KB - Virtual size: 20KB