0436139763658a451173a7cdb974a2dd5573d838b04568251cc90ced10f91927

General

Target

0436139763658a451173a7cdb974a2dd5573d838b04568251cc90ced10f91927
Size

314KB
MD5

54a2ff7b020a3d2802b9c44aae3f1f80
SHA1

3155a65e1a1564c4bde2328caa05585ebbb08785
SHA256

0436139763658a451173a7cdb974a2dd5573d838b04568251cc90ced10f91927
SHA512

d1ea05acaf42320f914462b7f8579d769a3fd018bcc3ff6f2ed49b53baa2117c7bc797cf9d89e1d0132aa395a904e23852968a88e9b329589c8fdb56327a51f5
SSDEEP

6144:3HYmeqmTdfAX+VOCWQf1oUN+EAfKuJ3cLN1agA6WY7FE6S+7zGzwu5FWX:3peqW6X+V2Qf1ZPAiuNcLN1m6rDS+noU

Score

N/A

Malware Config

Signatures

Files

0436139763658a451173a7cdb974a2dd5573d838b04568251cc90ced10f91927
.exe windows x86

7807e03d90b953efc1424eb64bbdcca1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
RtlUnwind
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7807e03d90b953efc1424eb64bbdcca1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 256KB - Virtual size: 256KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 256KB - Virtual size: 256KB