2181404e0e3e4ddba9481ac75f37f36394c4957fca9152df3acae506df4e2101

General

Target

2181404e0e3e4ddba9481ac75f37f36394c4957fca9152df3acae506df4e2101
Size

153KB
MD5

210d5e4ee51aa3964798636e7c324476
SHA1

3e089fcc6649aacd8e477df41ef30fb7590639ee
SHA256

2181404e0e3e4ddba9481ac75f37f36394c4957fca9152df3acae506df4e2101
SHA512

091ebacfe6c50b119a14403122709e8b254df35fd891ec10d2ab6747e91015b9cef801840ee23958a17d46dc1f6e221ef963e4490f47c9d9705a71924a8d6b1d
SSDEEP

3072:iNkcfTtp7mI/tmCaJlaDasTsIRqbP0E4HDJdo53UWLIoOF80pac/4v+BDfaIs5xl:567mGmCaJl4PYyCSN6+WLIoOW0paUMIU

Score

N/A

Malware Config

Signatures

Files

2181404e0e3e4ddba9481ac75f37f36394c4957fca9152df3acae506df4e2101
.exe windows x86

dfbe9de575acd68a20f31c00470f6cba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWait
DeleteFileA
GetProcessShutdownParameters
ProcessIdToSessionId
VerifyVersionInfoA
GlobalDeleteAtom
GetStartupInfoA
SetStdHandle
CallNamedPipeA
SetFilePointerEx
SwitchToFiber
CreateMutexW
GetModuleHandleA
GlobalUnfix
SetTimerQueueTimer
VirtualFree
GetCurrentProcessId
CreateFileA

msvcrt

exit
_XcptFilter
_controlfp
__getmainargs
_exit
__setusermatherr
__p__commode
_adjust_fdiv
_except_handler3
_acmdln
__set_app_type
_initterm
__p__fmode

user32

DdeFreeDataHandle
GetNextDlgTabItem
TabbedTextOutW
GetShellWindow
SetDlgItemInt
ToUnicode
CheckMenuRadioItem
LoadBitmapW
RegisterClassA
SetWindowPlacement
GetAncestor
ReplyMessage
AllowSetForegroundWindow
LoadCursorFromFileW
GetUpdateRgn
DrawAnimatedRects
CreateIcon
ReleaseCapture
GetAltTabInfoA
SystemParametersInfoA
GetMenuItemCount
CreateDialogParamA
DdeInitializeW
DragDetect
DefMDIChildProcA
ScrollDC

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dfbe9de575acd68a20f31c00470f6cba

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 93KB - Virtual size: 92KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 11KB - Virtual size: 88KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 93KB - Virtual size: 92KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 11KB - Virtual size: 88KB

.rsrc
Size: 8KB - Virtual size: 7KB