31cfff04538d4b2c9743bae3cf47f08ccfc2f999bb37fe3edf9bc6470d3809d8

General

Target

31cfff04538d4b2c9743bae3cf47f08ccfc2f999bb37fe3edf9bc6470d3809d8
Size

110KB
MD5

a1aaf24c1160e8fac0d9cb38ea24a1a0
SHA1

d93c4e98a2e7ca4d87c38d73ed74f5ee474c33ec
SHA256

31cfff04538d4b2c9743bae3cf47f08ccfc2f999bb37fe3edf9bc6470d3809d8
SHA512

2b278301ab7d9ce46bbdc00d9df8f942aaf7215a8ea20704476c15b38da791244b6e8e4263cdd7722b5431e2154449f417b6efffea0f80ae6c2f60f39a2dee9c
SSDEEP

3072:W0L6FVFQSiRJ+KYaePvEVk6lrnbnZc2CN1+UA:FL6F1KYasYl7CNMU

Score

N/A

Malware Config

Signatures

Files

31cfff04538d4b2c9743bae3cf47f08ccfc2f999bb37fe3edf9bc6470d3809d8
.exe windows x86

0633f623693d5b18df97f032a8b5fb1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
GetModuleFileNameW
LocalAlloc
GetFileType
ExitProcess
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

advapi32

RegOpenKeyW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0633f623693d5b18df97f032a8b5fb1c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 3KB - Virtual size: 17KB

.rsrc Size: 71KB - Virtual size: 70KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 17KB

.rsrc
Size: 71KB - Virtual size: 70KB

.reloc
Size: 3KB - Virtual size: 3KB