b47b9cf863f541151f5aad7567be12153c10470c5f85f32c134a5f6e1be272cf

General

Target

b47b9cf863f541151f5aad7567be12153c10470c5f85f32c134a5f6e1be272cf
Size

114KB
MD5

4562cd2caa8f4be52dde802ec28c5110
SHA1

da4bcf0c6c4a1104dc6877d97f4edc2d6e2c3be2
SHA256

b47b9cf863f541151f5aad7567be12153c10470c5f85f32c134a5f6e1be272cf
SHA512

79976f19b9122d00919d0a8fa0fc362cd7736fc3a9aff3709b263bf0f8144e83ab3def175f2c2aef971a273ebe0d41689d43ebf066c4eb21af41f7b3a0ec97f9
SSDEEP

3072:lYwnVS570M9kdatGCO+xmBc+hMPhPsxRqK/RJ:vVs7nyatGt+SYF0

Score

N/A

Malware Config

Signatures

Files

b47b9cf863f541151f5aad7567be12153c10470c5f85f32c134a5f6e1be272cf
.exe windows x86

3e783184eeaff005d739f64408b19222

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSetInformation
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetLastError
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetProcessHeap
GetTickCount
GetCommandLineW
UnhandledExceptionFilter

msvcrt

__set_app_type
_controlfp
__p__commode
__setusermatherr
fwprintf
_iob
towupper
_except_handler4_common
?terminate@@YAXXZ
__p__fmode
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memset

fvewiz

FveuiWizard
FveuipClearFveWizOnStartup

ole32

CoUninitialize
CoInitialize

shell32

CommandLineToArgvW
ShellExecuteW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e783184eeaff005d739f64408b19222

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

fvewiz

ole32

shell32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 888B

.rsrc Size: 89KB - Virtual size: 88KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 888B

.rsrc
Size: 89KB - Virtual size: 88KB

.reloc
Size: 18KB - Virtual size: 21KB