6963aa4f13f4ac0e6a50e687b5e3b6400af6ad6482afb4f320fdcefde58d0d85

General

Target

6963aa4f13f4ac0e6a50e687b5e3b6400af6ad6482afb4f320fdcefde58d0d85
Size

372KB
MD5

8335eedb6fe2143771ad4bcce1115a90
SHA1

1a72a23ca435234d9572dddfe97a41438f5e6d78
SHA256

6963aa4f13f4ac0e6a50e687b5e3b6400af6ad6482afb4f320fdcefde58d0d85
SHA512

19c98ec1b121e09de4b9d9cae3b496c2c8a22be814e58fa32f495f8723a6fc5c8bcd5161e4eba9d9d599d1fecbde0e047aa8c1e90deaae8a011f30b104ecfd2d
SSDEEP

6144:tfLnCpDhr64Fg7WXxezDpRcUeHQy7Kd85b6v91ZwrEYVjq8YucJ9IxgxCOmT:tfLn4FgaoBRQHPOC41BwWsc73QT

Score

N/A

Malware Config

Signatures

Files

6963aa4f13f4ac0e6a50e687b5e3b6400af6ad6482afb4f320fdcefde58d0d85
.exe windows x86

3443710482d7b08eb80e5cb906486b46

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
WaitForSingleObject
GetModuleHandleW
VirtualFree
GetSystemPowerStatus
GetModuleFileNameW
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleHandleA
VirtualProtect
CreateThread
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3443710482d7b08eb80e5cb906486b46

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: - Virtual size: 156KB

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 326KB - Virtual size: 325KB

.text
Size: - Virtual size: 156KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 326KB - Virtual size: 325KB