4a4996f59821f6581ba667bfccae7d792b5b6663c367780ddf7b76c043d69cda

General

Target

4a4996f59821f6581ba667bfccae7d792b5b6663c367780ddf7b76c043d69cda
Size

266KB
MD5

685216fa1c49e5af39d0ab67adee8af0
SHA1

65fd2a615b7daaababbb2e8ba9f1beeeff397876
SHA256

4a4996f59821f6581ba667bfccae7d792b5b6663c367780ddf7b76c043d69cda
SHA512

071bd25a63cfa2ef14dfa2593b167cbbdfdc2c475eb290385d0f9dfe13468b11991194d115ab6b2bdb4850885b8b2eba2cf120a7545fdbe858d70b944a266730
SSDEEP

6144:biYjfgwNjeJvxbV9223BsfauKHgNWwc4jk6EtV1C966BDRFiO:biYj7NjeJdV3FuKHRO41C1D

Score

N/A

Malware Config

Signatures

Files

4a4996f59821f6581ba667bfccae7d792b5b6663c367780ddf7b76c043d69cda
.exe windows x86

472cf748dc905985d9d1f6b5874a0636

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileSectionA
GlobalFindAtomA
MoveFileW
GetPrivateProfileIntA
BeginUpdateResourceW
ExpandEnvironmentStringsA
GlobalFlags
GetDiskFreeSpaceExW
VirtualFree
WriteProfileStringA
_lwrite
OpenJobObjectW
GetProcAddress
LoadLibraryA
lstrlenA
GetCompressedFileSizeW
GetModuleFileNameW
SetDefaultCommConfigA
Sleep
VirtualAlloc
EndUpdateResourceA
WaitForDebugEvent
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
HeapAlloc
SetFilePointer
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle

Sections

.text
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

472cf748dc905985d9d1f6b5874a0636

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 114KB - Virtual size: 113KB

.rdata Size: 148KB - Virtual size: 147KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 1016B

.text
Size: 114KB - Virtual size: 113KB

.rdata
Size: 148KB - Virtual size: 147KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 1016B