464823008e388045f68235b6286961abbd9ee3880bfa268ef656a6004b58adc8

Sharing

Copy URL Twitter E-mail

General

Target

464823008e388045f68235b6286961abbd9ee3880bfa268ef656a6004b58adc8
Size

258KB
MD5

0d40fc1dbe7440d74b75705e115702a1
SHA1

113380d301bdf2ca0ac37ad6f0eda21df19cfac8
SHA256

464823008e388045f68235b6286961abbd9ee3880bfa268ef656a6004b58adc8
SHA512

7be6c1b71a1fd058e4b81479e2c487a23ff20cde5e2dac18a0efe0247a2ef7fb103fa9a4ad518ef5b02138b79bfa0292927994a9e0d367f3a8a9164939339a28
SSDEEP

6144:E/dWGssraXD1gUdqsuffYeDht12Mhs9ovPRokd:EEGsNYsANDhn2Mh/vPRo

Score

N/A

Malware Config

Signatures

Files

464823008e388045f68235b6286961abbd9ee3880bfa268ef656a6004b58adc8
.exe windows x86

43b51ba048be9596c0036e67c130f03b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetOEMCP
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetVersionExA
HeapAlloc
HeapCreate
DeleteCriticalSection
HeapFree
HeapReAlloc
InitializeCriticalSection
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
GetStartupInfoA
WriteFile
GetModuleHandleA
HeapDestroy
GetProcAddress

gdi32

GetStockObject

advapi32

RegCloseKey
RegOpenKeyExW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata2
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43b51ba048be9596c0036e67c130f03b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

ole32

Sections

.text Size: 6KB - Virtual size: 5KB

.text2 Size: 512B - Virtual size: 100B

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 200B

.rdata2 Size: 229KB - Virtual size: 228KB

.rdata1 Size: 512B - Virtual size: 100B

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 6KB - Virtual size: 5KB

.text2
Size: 512B - Virtual size: 100B

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 200B

.rdata2
Size: 229KB - Virtual size: 228KB

.rdata1
Size: 512B - Virtual size: 100B

.rsrc
Size: 19KB - Virtual size: 18KB