folksongManeuverable[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

folksongManeuverable.exe
Size

19KB
MD5

59bce9f07985f8a4204f4d6554cff708
SHA1

645c424974fbe5fe7a04cac73f1c23c96e1570b8
SHA256

ca24aef558647274d019dfb4d7fd1506d84ec278795c30ba53b81bb36130dc57
SHA512

3cf5825a9c7fb80ea0bd36775a92d07f34cd3709ed2c7c8f500f1c8baa5242768f6d575bd2477b77e3f177e7a4994d5c5bddb24c6eb43b60a6bd83ea026a8198
SSDEEP

384:X6iQTx5XYoNUGP/KvR/4dK+6ZXofB6FOWr+TLHW:qiQrXYoNUGP/Kvh4dK+5fBQGL

Score

N/A

Malware Config

Signatures

Files

folksongManeuverable.exe
.exe windows x64

84da4a3165e248148f65dbe03b98a436

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueW

kernel32

SetErrorMode
FreeLibrary
CreateProcessW
LoadLibraryExW
WaitForSingleObject
GetModuleHandleW
WideCharToMultiByte
GetSystemWow64DirectoryW
FormatMessageW
GetExitCodeProcess
SetFilePointer
ReadFile
CreateFileW
lstrcmpW
lstrlenW
Wow64EnableWow64FsRedirection
GetLastError
GetProcAddress
LocalAlloc
HeapSetInformation
CloseHandle
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
GetCommandLineW
lstrcpynW
GetTickCount
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

user32

LoadStringW
CharNextW

msvcrt

exit
_wcmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_cexit
__C_specific_handler
__wgetmainargs
__argc
wcscpy_s
strcat_s
__wargv
_wsplitpath_s
wcsncpy_s
swprintf_s
_exit
_XcptFilter
wcscat_s
memset

ole32

OleInitialize
OleUninitialize

ntdll

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

comctl32

ord344

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84da4a3165e248148f65dbe03b98a436

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

ntdll

comctl32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 2KB

.pdata Size: 512B - Virtual size: 396B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 20B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 2KB

.pdata
Size: 512B - Virtual size: 396B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 20B