9fa35029f7dc0f74c1a8016af52d2a7d5de3fa63af74f78709e7d49a98f76005

General

Target

9fa35029f7dc0f74c1a8016af52d2a7d5de3fa63af74f78709e7d49a98f76005
Size

259KB
MD5

02a09b49b889cf3de446112984696887
SHA1

ca6ae3a70cdb366bb53c51f580ad2e397e45c8c2
SHA256

9fa35029f7dc0f74c1a8016af52d2a7d5de3fa63af74f78709e7d49a98f76005
SHA512

492eb64cfec9b63c68b4281750bdac995d4ed2ca339f0017f12574b1750c904b69dc40737e0ba8dc8865b1888982d50916043139f19f33b2f819d6bf265a306a
SSDEEP

6144:GTHcdOGaLnNz4It1VVROJbm480qdao/fayHx9KnSbdNmwbFaxn/uTaYBgt:GTHcdOGaD9kJbqKQSk9OqKw5SuTFBgt

Score

N/A

Malware Config

Signatures

Files

9fa35029f7dc0f74c1a8016af52d2a7d5de3fa63af74f78709e7d49a98f76005
.exe windows x86

6dc56d5d892ad59f38ad8ef5a6f35c69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
PulseEvent
GetModuleHandleW
GetTickCount
VirtualFree
GetSystemPowerStatus
GetModuleFileNameW
FlushInstructionCache
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleHandleA
VirtualProtect
ResumeThread
GetLastError
HeapFree
HeapAlloc
GetStartupInfoW
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dc56d5d892ad59f38ad8ef5a6f35c69

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 7KB - Virtual size: 10KB

.rsrc Size: 207KB - Virtual size: 207KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 7KB - Virtual size: 10KB

.rsrc
Size: 207KB - Virtual size: 207KB