11e20bd3083dce24297f897e02cad4f4d9182831b265c9597ea1681c1ad8d88f

General

Target

11e20bd3083dce24297f897e02cad4f4d9182831b265c9597ea1681c1ad8d88f
Size

81KB
MD5

91a2bf17bcf895ff16ab6905e8dc068c
SHA1

4be9470ff0c6267848dffe83cb0342e2fe612bef
SHA256

11e20bd3083dce24297f897e02cad4f4d9182831b265c9597ea1681c1ad8d88f
SHA512

e9f807ef3eb2c3e54cc2a5118b8f1b5bad63fab68bf63105f52f95fde958cd30fda07d9e7f63a080955ffb13949e68a582e4457bbe92dc9ca59f646728c99b21
SSDEEP

1536:zx9fOePMssFhC/B/lcPokIgmvzjIau9vhoK4X/Yhk57j:zx9fOpz0oPMvzcauJhoK4Qu5f

Score

N/A

Malware Config

Signatures

Files

11e20bd3083dce24297f897e02cad4f4d9182831b265c9597ea1681c1ad8d88f
.exe windows x86

af809c0fe4ba89346c17874facbc1e1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
CreateFileA
CreateProcessA
WriteFile
LoadLibraryA
GetLastError
GetProcAddress
GetModuleHandleA
GetLocaleInfoA
GetVersionExA
Sleep
ExitProcess
OpenProcess
GetCurrentProcessId
SetFileAttributesA
GetFileAttributesA
GetModuleFileNameA
GetWindowsDirectoryA
WaitForSingleObject
CreateMutexA
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
FlushFileBuffers

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af809c0fe4ba89346c17874facbc1e1e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 11KB - Virtual size: 313KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 11KB - Virtual size: 313KB

.rsrc
Size: 512B - Virtual size: 436B