db240bb702100cfdf776a2e626a3dcfd5690f6bba0663e0465eed3498ff1c2bb

General

Target

db240bb702100cfdf776a2e626a3dcfd5690f6bba0663e0465eed3498ff1c2bb
Size

140KB
MD5

4b66406a7d8a13ac51ff5e153a6b82d6
SHA1

5ce9368f81082fb286410dd246ec41c332d08fb0
SHA256

db240bb702100cfdf776a2e626a3dcfd5690f6bba0663e0465eed3498ff1c2bb
SHA512

4b55a78b75b5d115eff43d8a750c88227400506f75960dcc579d4f0748dfe697c0acfd328d87d959e60b22b60bd7b55885e4afe0e63d890ec6be6fb788a9d681
SSDEEP

1536:X+iAkwHRwP6S8FkXeANHvhlJtOAF6ycSW/haU3WTqwHdeaPUTG9trTtHez6WqCIE:X6uPfxjhv5tjcnpaYoPr4z2TM42Pp

Score

N/A

Malware Config

Signatures

Files

db240bb702100cfdf776a2e626a3dcfd5690f6bba0663e0465eed3498ff1c2bb
.exe windows x86

e239405e02b90105ff2681ab04e72e67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
IsProcessorFeaturePresent
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
RtlUnwind
ExitProcess
GetLastError
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
RaiseException
HeapCreate
HeapFree
GetProcAddress
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection

user32

GetMessageW
PostQuitMessage
TranslateMessage
RegisterClassExW
ShowWindow
CreateWindowExW
UpdateWindow
DefWindowProcW
DispatchMessageW
IsChild
GetParent
LoadCursorW
FindWindowW
LoadIconW
BringWindowToTop
GetSysColor

gdi32

GetStockObject

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e239405e02b90105ff2681ab04e72e67

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 26KB - Virtual size: 25KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 26KB - Virtual size: 25KB