c13a50b0edec44320a5ad038364a04ce02cd14ca447867dc88af5aadd9ac75aa

General

Target

c13a50b0edec44320a5ad038364a04ce02cd14ca447867dc88af5aadd9ac75aa
Size

275KB
MD5

37cf661cafcc7c9b2b4faa2808e95bcc
SHA1

47527e80a2a6add410b8baf0005c58667b7f4f5b
SHA256

c13a50b0edec44320a5ad038364a04ce02cd14ca447867dc88af5aadd9ac75aa
SHA512

c32be979dad3e8a7e2e75a0866575409a19e417b25f18a6191838b2082fb1897b80508ca3374ea3988f6360f142ca11b2c47239eaf18dd9348e020f2c535d367
SSDEEP

6144:yyY/pAdSOcSW6g4gUIz6hYiZ29U6hki0Hd6m9jZ2N:QpAwOYkjgki09PFI

Score

N/A

Malware Config

Signatures

Files

c13a50b0edec44320a5ad038364a04ce02cd14ca447867dc88af5aadd9ac75aa
.exe windows x86

380d9a524544ad106542eba6d4c5329c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetModuleHandleA
lstrlenW
CreateMutexA
CreateEventA
VirtualAlloc
GetStdHandle
GetVersionExA
CompareStringW
CompareStringA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
SetEnvironmentVariableA

secur32

ApplyControlToken

Sections

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

380d9a524544ad106542eba6d4c5329c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

secur32

Sections

.itext Size: 2KB - Virtual size: 1KB

.text Size: 39KB - Virtual size: 39KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 223KB - Virtual size: 265KB

.reloc Size: 4KB - Virtual size: 3KB

.itext
Size: 2KB - Virtual size: 1KB

.text
Size: 39KB - Virtual size: 39KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 223KB - Virtual size: 265KB

.reloc
Size: 4KB - Virtual size: 3KB