331eda8129ed98df70d9aabdf439d6b5e89c70fa75f507d35340e9e2a9d5e6f9

General

Target

331eda8129ed98df70d9aabdf439d6b5e89c70fa75f507d35340e9e2a9d5e6f9
Size

184KB
MD5

835aaca37b53ad836ac0a65876b98716
SHA1

608a09907a7c28d51e5b677f0c6a21c6ef5f1659
SHA256

331eda8129ed98df70d9aabdf439d6b5e89c70fa75f507d35340e9e2a9d5e6f9
SHA512

83f77f5f0cc08de33b3b3d7d2e5e8854c47cc437eebd62100d9a8a745fba8a5f5409a440b9ec2bb8c05212fab531edd4f1466f1d21d36745629ba954256a3595
SSDEEP

3072:aUrsfj+99EIUXDobvAaySl6J9zjwQzFRfxhCq8Z95T2uhF/RRdoTd1yIGAf:aSmj+99EtDCvAay7RjzFpDsTfRRKh1rG

Score

N/A

Malware Config

Signatures

Files

331eda8129ed98df70d9aabdf439d6b5e89c70fa75f507d35340e9e2a9d5e6f9
.dll windows x86

6e33abcb31ea9976f083cfed3860c850

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
CloseHandle
TerminateProcess
OpenProcess
lstrcmpiW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryA
GetVersionExW
GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc
DebugBreak
RaiseException
GetVersionExA
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
GetCurrentProcess
RtlUnwind
GetLastError
MultiByteToWideChar
ExitProcess
GetModuleHandleA
IsBadWritePtr
IsBadReadPtr
HeapValidate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
VirtualQuery
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
VirtualProtect
GetSystemInfo
GetLocaleInfoA
SetStdHandle
FlushFileBuffers

Exports

Exports

_FindProcess
_KillProcess
_Unload

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e33abcb31ea9976f083cfed3860c850

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 4KB - Virtual size: 3KB