0991ef0c62bc6e1830af3a1d1c8ca897cb2359a46692fbfbebef76d4ead3ba34

General

Target

0991ef0c62bc6e1830af3a1d1c8ca897cb2359a46692fbfbebef76d4ead3ba34
Size

324KB
MD5

407be591b9e69b2e2cfa4c04ffad92c0
SHA1

03e4e90731364f0e1388ff86085c7650301a42a1
SHA256

0991ef0c62bc6e1830af3a1d1c8ca897cb2359a46692fbfbebef76d4ead3ba34
SHA512

b9fad963490bf912d86a23531da1277a61b161b4535e95172241a30cf059207e0e4a2000c5fec9c178dbecd18ca8b2351a6bb54fd09301486b49373a108ecc6c
SSDEEP

6144:HMh09uKfub9RK676cVyyRuFkCFYQ9qwNQg51t9/Ua42cXKRcsbmSZZzn:HMh09JEvKGky8FkCqQ9qwNr59/Uav4IN

Score

N/A

Malware Config

Signatures

Files

0991ef0c62bc6e1830af3a1d1c8ca897cb2359a46692fbfbebef76d4ead3ba34
.exe windows x86

7ca774a3ee553c78a8da53d0511e836d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
VirtualProtect
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo

oleaut32

SysAllocString

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ca774a3ee553c78a8da53d0511e836d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

oleaut32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 292KB - Virtual size: 291KB

.rsrc Size: 4KB - Virtual size: 16B

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 292KB - Virtual size: 291KB

.rsrc
Size: 4KB - Virtual size: 16B