71f1de89fac36c826de85e36d409d6191b1e459a756c765ea4de21545590e751

General

Target

71f1de89fac36c826de85e36d409d6191b1e459a756c765ea4de21545590e751
Size

237KB
MD5

3b4c96070b3a476aa1ec2934f6207b20
SHA1

a4b30ae89203c068a1c309259be46167e52672d8
SHA256

71f1de89fac36c826de85e36d409d6191b1e459a756c765ea4de21545590e751
SHA512

e796d9a943f9087acea3b958581173f5a5fe02cdc23cc7aa29714e7f28f546becdb3510ed4550a0a98a29f888b403cd43806bec75d1fcf133cefaa4a284ae600
SSDEEP

6144:FHz8rHtHR72ozwE+c4qmoG6b2WxegYaUjU9DoxKCa5EE/:VKX72ozwE+dqmVCepA9MxKR5EE/

Score

N/A

Malware Config

Signatures

Files

71f1de89fac36c826de85e36d409d6191b1e459a756c765ea4de21545590e751
.exe windows x86

118d8bbc9f004986be544f4a39027f1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
ResetEvent
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetProcessHeap
HeapAlloc
HeapFree
GetCurrentThreadId
CreateSemaphoreW
ReleaseSemaphore
WaitForSingleObject
QueryPerformanceFrequency
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetLocalTime
GetProcAddress

ole32

CLSIDFromString

w32topl

ToplListCreate

sendmail

DllGetClassObject

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.QneXzV
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.TbV
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.O
Size: 512B - Virtual size: 577B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

118d8bbc9f004986be544f4a39027f1d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

w32topl

sendmail

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 1024B - Virtual size: 866B

.QneXzV Size: 1024B - Virtual size: 1KB

.TbV Size: 1KB - Virtual size: 2KB

.data Size: 212KB - Virtual size: 458KB

.O Size: 512B - Virtual size: 577B

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 1024B - Virtual size: 866B

.QneXzV
Size: 1024B - Virtual size: 1KB

.TbV
Size: 1KB - Virtual size: 2KB

.data
Size: 212KB - Virtual size: 458KB

.O
Size: 512B - Virtual size: 577B

.rsrc
Size: 3KB - Virtual size: 2KB