20b636462df394c108c7f677111bd42328f2784ce506f0af73262939bfbf8a8b

General

Target

20b636462df394c108c7f677111bd42328f2784ce506f0af73262939bfbf8a8b
Size

199KB
MD5

42a637fe5711a262fcea58c80b142826
SHA1

47806023ca7ba3106220148c623516c8c885655c
SHA256

20b636462df394c108c7f677111bd42328f2784ce506f0af73262939bfbf8a8b
SHA512

06893b171d438428def5bbac4a2fc728ea5c709c6b1dded2f1e39ceb19e1a128d9f4502479839a53b5cd410efb0ead4431fea40a0d9c4b3aa143e6fca022be30
SSDEEP

3072:qGBuIOgFFzhdyt15Y1xDDHbS7/aSzZJ5h7x4yZIpV/vUgsmfRpbYewOvo8E:qyLAmxTW/PdJ5bbIpKomNO3E

Score

N/A

Malware Config

Signatures

Files

20b636462df394c108c7f677111bd42328f2784ce506f0af73262939bfbf8a8b
.dll windows x86

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 165KB - Virtual size: 168KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 165KB - Virtual size: 168KB