956fecc77b3fc18f5f919139f89104ca3d7ed44c4ce95e3cdfd9289861f256e8

General

Target

956fecc77b3fc18f5f919139f89104ca3d7ed44c4ce95e3cdfd9289861f256e8
Size

576KB
MD5

189c76e49c10c88af85be064193e1259
SHA1

dac83025e4c6bfa46b8dd61802ca0fa6a90d3744
SHA256

956fecc77b3fc18f5f919139f89104ca3d7ed44c4ce95e3cdfd9289861f256e8
SHA512

2b403c577a1675694770a08a6484c7d719653591a4f3f0804af1c8598a50ed6ed0ee1c42b9cdf8d8465a0504307db891f256692dd373eaff99db0ef45499305e
SSDEEP

12288:aWKnbGTzpq37zkMNTMyRJgkdYLCjxbPginXynxuqKnJ:NI6QpRJgkdY2jJIinXWxuqKnJ

Score

N/A

Malware Config

Signatures

Files

956fecc77b3fc18f5f919139f89104ca3d7ed44c4ce95e3cdfd9289861f256e8
.exe windows x86

524a406c02450477f34f35c23fd096c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
CreateFileW
GetFileSize
ReadFile
MultiByteToWideChar
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

powrprof

PowerReadDCValueIndex
PowerEnumerate
PowerReadFriendlyName
PowerGetActiveScheme
PowerReadACValueIndex

msvcr100

__winitenv
_initterm
exit
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
??3@YAXPAX@Z
??2@YAPAXI@Z
swscanf_s
wprintf
_initterm_e
memset

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 556KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

524a406c02450477f34f35c23fd096c6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

powrprof

msvcr100

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 932B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 556KB - Virtual size: 2.3MB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 932B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 556KB - Virtual size: 2.3MB