2c97f6dc11d0fc510744ad1f5a3626cf55e534c681bf6556dc402efd2c8d9111

General

Target

2c97f6dc11d0fc510744ad1f5a3626cf55e534c681bf6556dc402efd2c8d9111
Size

236KB
MD5

0ab5a409cbd07ca772a50b1213adb960
SHA1

c26331d2f877d8ec60e868b86ed218cb0a743f18
SHA256

2c97f6dc11d0fc510744ad1f5a3626cf55e534c681bf6556dc402efd2c8d9111
SHA512

f9002735b112fff06d3772096fdc73081d021c5b9ccd17e72026e92308d2c895323b3c5aab4b31b9be6bd2c7ecb3948efee4eeaa105a00dba019ab8872e97813
SSDEEP

6144:mltK7TOrmk0GeWvRbYUzP6OKQtQya9vFKtVnZ:Yg7TOrmfbWZkUzPHIyapFY

Score

N/A

Malware Config

Signatures

Files

2c97f6dc11d0fc510744ad1f5a3626cf55e534c681bf6556dc402efd2c8d9111
.exe windows x86

4a8c8bced6582bdb1287cb0a1eac3cb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
TlsFree
VirtualFree
LocalFlags
FormatMessageW
GetProcessHeap
GetPrivateProfileStructA
CreateTapePartition
FreeLibraryAndExitThread
SetFileApisToOEM
GetAtomNameA
GetDriveTypeW
GetNamedPipeHandleStateW
GetProcAddress
LoadLibraryA
MoveFileA
CreateWaitableTimerA
_llseek
VirtualUnlock
VirtualAlloc
ExitProcess
QueryPerformanceCounter
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
HeapAlloc
GetLastError
SetFilePointer
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a8c8bced6582bdb1287cb0a1eac3cb5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 176KB - Virtual size: 176KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 176KB - Virtual size: 176KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 2KB - Virtual size: 1KB