916c68203f329eaf00e0dbf5a7571107708ce037935b5f51d7eed41ad581cdfd

General

Target

916c68203f329eaf00e0dbf5a7571107708ce037935b5f51d7eed41ad581cdfd
Size

223KB
MD5

9831b1092d9acaeb30351e1db30e8521
SHA1

3b25a4553abced0c237198335fd967f92ad86756
SHA256

916c68203f329eaf00e0dbf5a7571107708ce037935b5f51d7eed41ad581cdfd
SHA512

6a764462d4199306510fc8913e6ff9bb4f6f2db74a2a013abc407afd1fc1aefb4843ad2713227b5a9ec1aa74938e7286f817c8e021166c16ae35933e0d1faf8a
SSDEEP

6144:LUC2BeojrZsUYpsuxyRd/1qgcKvvTgfBso:XweojrZsUYpsuxQ/0gRvvTgf

Score

N/A

Malware Config

Signatures

Files

916c68203f329eaf00e0dbf5a7571107708ce037935b5f51d7eed41ad581cdfd
.exe windows x86

904cc301862b14412d0268147bddc82e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrcmpA
LocalAlloc
FindAtomA
VirtualProtect
CloseHandle
GlobalAddAtomW
GetPrivateProfileSectionW
MultiByteToWideChar
LCMapStringW
IsProcessorFeaturePresent
WideCharToMultiByte
IsValidCodePage
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
RtlUnwind
HeapFree
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

MessageBoxA
GetGuiResources

shell32

ShellExecuteA

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

904cc301862b14412d0268147bddc82e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 16KB

.rsrc Size: 184KB - Virtual size: 184KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 16KB

.rsrc
Size: 184KB - Virtual size: 184KB