c0a2f1f3b8473c5e15766964872abfd9dc36d20909916035837b4a43ca5de731

General

Target

c0a2f1f3b8473c5e15766964872abfd9dc36d20909916035837b4a43ca5de731
Size

212KB
MD5

a092cf68db3c099301fe44b0b7d3648d
SHA1

19a37b5f19c9b4c70757ca594309bf8e6cabc857
SHA256

c0a2f1f3b8473c5e15766964872abfd9dc36d20909916035837b4a43ca5de731
SHA512

c91721b4f4a43d9c83916c8417da0d4299353346a6859951aca51f66a170fa605274354bff02439e0e5451961bbf0c99a3788e8b7241f63b757e6f38064c13db
SSDEEP

3072:YhiFYd50R+ytE3DZQY8pVzhrlX+MB5pJOU3aPztgryyXYf1ym:YhNrTQgqY8pBhNRB5RqPzqrXodR

Score

N/A

Malware Config

Signatures

Files

c0a2f1f3b8473c5e15766964872abfd9dc36d20909916035837b4a43ca5de731
.exe windows x86

25c4b93048474866a92215f67a5c673a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetCurrentThreadId
FindAtomA
WaitForSingleObject
CreateProcessA
LoadLibraryA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
SetEnvironmentVariableA
VirtualAlloc
VirtualFree
GetVersionExA
Sleep
TerminateProcess
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetProcAddress
lstrcpyA
lstrlenA
GetLastError
HeapSize
HeapReAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

InflateRect
GetFocus
IsWindowVisible
wsprintfA
GetCursorPos
EqualRect
ClientToScreen
GetWindowRect

gdi32

GetBkMode
GetBkColor

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25c4b93048474866a92215f67a5c673a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 152KB - Virtual size: 155KB

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 152KB - Virtual size: 155KB