3a417657bd1cbf0989c45b86f9c21b839e396ce7766771bedc4b77b83ecd313f

General

Target

3a417657bd1cbf0989c45b86f9c21b839e396ce7766771bedc4b77b83ecd313f
Size

352KB
MD5

19f576ab9aac3ea1285e1670b1e3b2b1
SHA1

dc54ed445f74b2a40c2abb4c8d6d6aeef56aeb3b
SHA256

3a417657bd1cbf0989c45b86f9c21b839e396ce7766771bedc4b77b83ecd313f
SHA512

14095ad6edb0afd32c26a7f72404232e75c48afaecefb7507d0567479c67f4fc6c74a9a4d31827faf83c4b5968ae69e7bb0c6effe263779c13b630b4caf89edd
SSDEEP

6144:tWi+KRsvG89EXczNPhONmTnzcRhjgdJyTyT9tgfuKKeK8dGyvF:tEKb8NPENmjgRhjWJyTyBtgGT6Rv

Score

N/A

Malware Config

Signatures

Files

3a417657bd1cbf0989c45b86f9c21b839e396ce7766771bedc4b77b83ecd313f
.exe windows x86

35d6e335ef7b6652f3b1e56deedcf36c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarBstrCmp

advapi32

RegOpenKeyA

shell32

SHGetFileInfoA

kernel32

GetModuleHandleExA
OutputDebugStringW
GetFirmwareEnvironmentVariableW
HeapWalk
SetCommState
GetTickCount
GetProfileStringA
SetMailslotInfo
EnumCalendarInfoW
WaitForDebugEvent
InterlockedExchangeAdd
SetCurrentDirectoryA
CreateProcessW
lstrcpyW
SetDefaultCommConfigA
FindCloseChangeNotification
FlushInstructionCache
GetCommTimeouts
GetQueuedCompletionStatus
GetModuleHandleA
VirtualProtect
VirtualQuery
GetConsoleWindow
lstrlenA

msvcrt

realloc
sprintf
memcpy
mbstowcs

clusapi

ClusterRegSetKeySecurity
RemoveClusterResourceDependency
CloseClusterResource

user32

GetShellWindow
SetCursor
GetClassNameA
ShowWindow
RegisterWindowMessageW
MessageBeep

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 296KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35d6e335ef7b6652f3b1e56deedcf36c

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

advapi32

shell32

kernel32

msvcrt

clusapi

user32

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 276KB

DATA Size: 296KB - Virtual size: 293KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 276KB

DATA
Size: 296KB - Virtual size: 293KB

.rsrc
Size: 24KB - Virtual size: 23KB