f9fc525c4f02f7b0f8d3343662e7d22a72734659090a9326df75208d8d9ae578

General

Target

f9fc525c4f02f7b0f8d3343662e7d22a72734659090a9326df75208d8d9ae578
Size

56KB
MD5

a29bf44f901739cb9a9f531f542726ee
SHA1

640436033db7b463a7718c215e4ce7c2fce4888c
SHA256

f9fc525c4f02f7b0f8d3343662e7d22a72734659090a9326df75208d8d9ae578
SHA512

2c577b1546545a8c81754f1c2c5451d2238173f5255a002a2e11dc760c8618c8abbbabf08edef096d8ceff888b07909e6993e5aec5cca1fc847c3a884283fa55
SSDEEP

768:f5tfStrtF5to/X4Jf9KXsKeHRGRcNkDIY6KISU5Tze6u85CDRR2SPx0T0+:f5tf473J6PWm4kDXo5TzdU2Oxi0+

Score

N/A

Malware Config

Signatures

Files

f9fc525c4f02f7b0f8d3343662e7d22a72734659090a9326df75208d8d9ae578
.exe windows x86

a8f2b52a54ec054c3795241582e66473

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrW
GetCurrentProcess
GetCommandLineA
GetFileAttributesW
GetStdHandle
VirtualProtectEx
GetFileType
EndUpdateResourceA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
RaiseException
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CreateWindowExA
ShowWindow
UpdateWindow

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8f2b52a54ec054c3795241582e66473

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 14KB - Virtual size: 94KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 14KB - Virtual size: 94KB