df7ea032f2f216156eca038e944681324407517e1c693f2f6740794603d0b6ae

General

Target

df7ea032f2f216156eca038e944681324407517e1c693f2f6740794603d0b6ae
Size

201KB
MD5

928d2a3a69deba8222345f0c51c25720
SHA1

49a6e6c23205b621ee50c38b50bb4900aa620c30
SHA256

df7ea032f2f216156eca038e944681324407517e1c693f2f6740794603d0b6ae
SHA512

d34d5606fd8e2c65750e7db023ea46e959d40195b013d741ae713be840d9a961018ad2ec9df35068d5b6b5d85e3d4355254c6bfdb1bae8d440446e23857b7447
SSDEEP

3072:/LpFgL5DM1Ul5hM/FZ3mpxV0MWUhGkYF8QSAib92EIHWeyoiBb6Cpco5ivPS:DpsAsTMtpsxVBWUM8QSAy92FHWbbUP

Score

N/A

Malware Config

Signatures

Files

df7ea032f2f216156eca038e944681324407517e1c693f2f6740794603d0b6ae
.exe windows x86

0a2303191e70143ba6fce9ab96123d2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsA
GetDefaultCommConfigW
GetModuleHandleA
LoadLibraryA
GetProcAddress
FlushFileBuffers
lstrcmpA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
HeapReAlloc
GetOverlappedResult
LocalFree
EraseTape
GetFullPathNameW
GetStringTypeW
GetStringTypeExW
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
ReadFile
CloseHandle

oleaut32

VarFormatDateTime
VarSu
VariantCopyInd
RegisterTypeLi
VarInt
OaBuildVersion
VarFormatNumber
VariantChangeTypeEx

comctl32

ord3
FlatSB_SetScrollInfo
ImageList_AddIcon
InitializeFlatSB
ImageList_GetBkColor

shlwapi

PathIsDirectoryW
PathRelativePathToA
StrIsIntlEqualA
SHSetValueA
PathIsPrefixA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a2303191e70143ba6fce9ab96123d2b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

oleaut32

comctl32

shlwapi

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 136KB - Virtual size: 135KB

.data Size: 33KB - Virtual size: 411KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 136KB - Virtual size: 135KB

.data
Size: 33KB - Virtual size: 411KB

.rsrc
Size: 3KB - Virtual size: 2KB