2eac6a8a412c1370e9150f911734d4491092d1062c274442e3535f9d813fe468

General

Target

2eac6a8a412c1370e9150f911734d4491092d1062c274442e3535f9d813fe468
Size

39KB
MD5

a3b7b9c7ba6b5a9ea1fc0c68a0779bdd
SHA1

71811310d6ae889570bf3605d2788935b8b5eb9c
SHA256

2eac6a8a412c1370e9150f911734d4491092d1062c274442e3535f9d813fe468
SHA512

71d944b9c68e8751f595588f0080fb981181247e3936ae8c39438ca5897888f300b5735487949e57279889d5fb7bba2d469937cccb2c404f12c593d62ac451ff
SSDEEP

768:Lv7uVEFx68piJBK61Ga13ldl50D6QBsqBit:b8Ez8h1RTlatBi

Score

N/A

Malware Config

Signatures

Files

2eac6a8a412c1370e9150f911734d4491092d1062c274442e3535f9d813fe468
.exe windows x86

fdd32489eb7124c4c42e24ecdfb954af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrcmpW
GetLastError
WritePrivateProfileStringW
HeapFree
GetProcessHeap
GetTickCount

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
wcstok
_vsnwprintf

shlwapi

UrlEscapeW

shell32

SHGetFolderPathW

wdscore

CurrentIP
WdsSetupLogMessageW
ConstructPartialMsgVW

advapi32

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fabmsmh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fdd32489eb7124c4c42e24ecdfb954af

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

shlwapi

shell32

wdscore

advapi32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 28KB - Virtual size: 29KB

fabmsmh Size: - Virtual size: 4KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 28KB - Virtual size: 29KB

fabmsmh
Size: - Virtual size: 4KB