74dbdcb4933acc5bc5c8993baf2732312fd9066dce2af4f0e03256f115c68941

Sharing

Copy URL

Twitter E-mail

General

Target

74dbdcb4933acc5bc5c8993baf2732312fd9066dce2af4f0e03256f115c68941
Size

227KB
MD5

93de71c37daa7368477b5f489e9b9900
SHA1

98730779d0cc15b5128735f28c7b98e3a930ef68
SHA256

74dbdcb4933acc5bc5c8993baf2732312fd9066dce2af4f0e03256f115c68941
SHA512

55fdde097edf7acb5da58c20d269feb1937d230f96ee1bcbbfc02369c2e902cbd750e4aca6ba7da6fbfc608d52668c5d696028826f7358a633211793beaec2a3
SSDEEP

6144:x5ob8Hr+juFoaPznY+Rcr8HPdcM60yWC+56kljMEv5:rob8HSUr5yPp66kljl5

Score

N/A

Malware Config

Signatures

Files

74dbdcb4933acc5bc5c8993baf2732312fd9066dce2af4f0e03256f115c68941
.exe windows x86

78567d5c29b8f918ee7aee8cece5247d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DuplicateIcon
DragQueryPoint
FindExecutableA
ShellExecuteExA
ExtractAssociatedIconA

kernel32

GetStdHandle
HeapSize
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringW
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
HeapAlloc
RtlUnwind
LoadLibraryW
IsProcessorFeaturePresent
HeapReAlloc

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78567d5c29b8f918ee7aee8cece5247d

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 512B - Virtual size: 103B

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 9KB - Virtual size: 1.0MB

.xdata Size: 512B - Virtual size: 460B

.rsrc Size: 164KB - Virtual size: 164KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 512B - Virtual size: 103B

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 9KB - Virtual size: 1.0MB

.xdata
Size: 512B - Virtual size: 460B

.rsrc
Size: 164KB - Virtual size: 164KB

.reloc
Size: 7KB - Virtual size: 6KB