f844b81aaa6d785b0c1f7305a8b248a14f5ceeab2fcb10232d20790e5d591ee8

General

Target

f844b81aaa6d785b0c1f7305a8b248a14f5ceeab2fcb10232d20790e5d591ee8
Size

40KB
MD5

49f0327105f119e5da284047d6ae5a60
SHA1

69d294c52405e84aff7e7bffd84ad1cdbe561d51
SHA256

f844b81aaa6d785b0c1f7305a8b248a14f5ceeab2fcb10232d20790e5d591ee8
SHA512

fb5e33ba5bac75ef5bf7c97b70aab009d6eae00d0b291913ba008f994e24c99fc1153238c95494d4120dd1ea9f3346847f13f3cc85ef10f1eb25b0f87ab01e4a
SSDEEP

768:ielEMADAC9Xi4DQfrDc4Y2weUwfiFRFGVEf/L5jy1jQIfZa6Kw+c:iNMADdXLUDmetaKg/9jyff86Kwt

Score

N/A

Malware Config

Signatures

Files

f844b81aaa6d785b0c1f7305a8b248a14f5ceeab2fcb10232d20790e5d591ee8
.exe windows x86

f3b1ce319b1f538cc259487b6a20556d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
??2@YAPAXI@Z
_initterm
_vsnwprintf
??3@YAXPAX@Z
wcstok
memset

advapi32

TraceMessage

kernel32

InterlockedDecrement
InterlockedIncrement
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedExchange
GetModuleHandleW
CreateEventW
WaitForSingleObject
CloseHandle
CompareStringW
SetEvent
GetLastError
GetVersion

shlwapi

StrRStrIW

ole32

CoInitializeEx
CoRegisterClassObject
CreateBindCtx
CoRevokeClassObject
CoUninitialize
CLSIDFromString

shell32

ShellExecuteExW
SHParseDisplayName
ord155

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3b1ce319b1f538cc259487b6a20556d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

shlwapi

ole32

shell32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 29KB - Virtual size: 30KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 29KB - Virtual size: 30KB