61eba5ba209b2bc89c90540c6bc6c8abacf723883b2ed2108ccd4009a5f06563

General

Target

61eba5ba209b2bc89c90540c6bc6c8abacf723883b2ed2108ccd4009a5f06563
Size

108KB
MD5

a17b535e5c66d5612054de6ed9d9c8c0
SHA1

332abdca6e151b1ab5391e8dfab9e7253f437c86
SHA256

61eba5ba209b2bc89c90540c6bc6c8abacf723883b2ed2108ccd4009a5f06563
SHA512

78b56687f7dac9d0343f21074067f391078c31b7f2bee35d77abb3d20557e4034b5b89c5568e2518097ef7f580b7195685488ab2d9c2a2b89ebc69ed2fb34812
SSDEEP

1536:KYvfwODeBvGMLyVa7rGsYCgk/iI8KG0RQOdd07f79JlfV82030Rkv7JgmZ17:KwfwODULyVa2w20RWJlfUVvBf7

Score

N/A

Malware Config

Signatures

Files

61eba5ba209b2bc89c90540c6bc6c8abacf723883b2ed2108ccd4009a5f06563
.exe windows x86

552a58951c8fd13aa87b99b83084e1e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
PulseEvent
GetModuleHandleW
GetTickCount
VirtualFree
WideCharToMultiByte
GetModuleFileNameW
FlushInstructionCache
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetWindowsDirectoryW
ResumeThread
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

wsprintfW

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

552a58951c8fd13aa87b99b83084e1e6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 5KB - Virtual size: 7KB

.rsrc Size: 51KB - Virtual size: 51KB

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 5KB - Virtual size: 7KB

.rsrc
Size: 51KB - Virtual size: 51KB