14474531ed80ed665109e77fe728df51be2b714ac650baca890d98de60e6b1f4

General

Target

14474531ed80ed665109e77fe728df51be2b714ac650baca890d98de60e6b1f4
Size

221KB
MD5

790766887bfb46b2ef7019cc89374110
SHA1

b2059864c4a2c2ccfe373fe45611f164d1309f27
SHA256

14474531ed80ed665109e77fe728df51be2b714ac650baca890d98de60e6b1f4
SHA512

3e7d4e1a76c7f1625dd774c45418867b590dbcf966047a69856ba5838d8250053a5c608775b70a3147c10f64f959b45e5e22ea7a79638322fd8fad08dcb23ddc
SSDEEP

6144:Faq5rKZqNGqaEb0/baIdEXOZICn/x9WoCCWUn9zFhT:Fa+K9u0/bUSICn/LMYzFhT

Score

N/A

Malware Config

Signatures

Files

14474531ed80ed665109e77fe728df51be2b714ac650baca890d98de60e6b1f4
.exe windows x86

e6fd349501d880ad484fad36d21a5cd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
FreeLibraryAndExitThread
GetShortPathNameW
VirtualProtect
CreateFileW
GetModuleFileNameW
VirtualAlloc
GetProcAddress
FileTimeToSystemTime
LoadLibraryA
CreateEventW
SetEndOfFile
VirtualQueryEx
GetDiskFreeSpaceExW
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

GetForegroundWindow

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6fd349501d880ad484fad36d21a5cd0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 194KB - Virtual size: 193KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 194KB - Virtual size: 193KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 3KB