ec4baac16a3620af731f06b3c7665fd67e7ca9217cbd82bf223f6e9358d98c3d

General

Target

ec4baac16a3620af731f06b3c7665fd67e7ca9217cbd82bf223f6e9358d98c3d
Size

121KB
MD5

8488416d41853ed6613264ae91c655ae
SHA1

7d4a62aa2af4726cc10a2c79235205bc666586ce
SHA256

ec4baac16a3620af731f06b3c7665fd67e7ca9217cbd82bf223f6e9358d98c3d
SHA512

edcd59d07c25e8701469e96a968f6bb95b3d683d3a5f97c73e63549aa82260bcf8a537878f164e406bbda7dac27c03f142af409fc783b60ebe7951b0a08af868
SSDEEP

3072:CLpa0QRXr6DFsSMv/CMOOFw7FWxwX+Aa:CLpaRrmsHkAw7FWxwX+Aa

Score

N/A

Malware Config

Signatures

Files

ec4baac16a3620af731f06b3c7665fd67e7ca9217cbd82bf223f6e9358d98c3d
.exe windows x86

b34d708566d54ce2d0faac56e1fa6d33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend

kernel32

HeapCreate
GetProcAddress
QueryPerformanceCounter
HeapFree
HeapAlloc
GetProcessHeap
ReadFile
ExitProcess
GetLastError
GetLocalTime
CreateFileW
GlobalAlloc
GetModuleFileNameW
LCMapStringW
LCMapStringA
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
VirtualFree
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

user32

AdjustWindowRect
CreateWindowExW
LoadIconW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b34d708566d54ce2d0faac56e1fa6d33

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

kernel32

user32

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 82KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 82KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 3KB