721c8f6cee8d517f3394a4f709fae0864f9f38410b78f5f38c6802fe4deb1ed7

General

Target

721c8f6cee8d517f3394a4f709fae0864f9f38410b78f5f38c6802fe4deb1ed7
Size

336KB
MD5

21ed640787a3c0eaef40d434ef3e9920
SHA1

97a9a627b188f99ce491e1d6ca073ff72563c37d
SHA256

721c8f6cee8d517f3394a4f709fae0864f9f38410b78f5f38c6802fe4deb1ed7
SHA512

14d25084d5a309a86986bf66bdb76f0a74b39747dff1368f7a0f736e782f25c200bc8bf8b0f2007ee9b0634262276432688fa0b7a875e90ea12a186474a5204e
SSDEEP

6144:5OZYrUOr2pLL/cydlnVxIgSpX9VnUaa5JePouFgJj:gZN1X/hdlVWgSp7UaecouuJj

Score

N/A

Malware Config

Signatures

Files

721c8f6cee8d517f3394a4f709fae0864f9f38410b78f5f38c6802fe4deb1ed7
.exe windows x86

349743a52334887b34c0f982b644af90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sfc

SfcIsFileProtected

kernel32

InterlockedDecrement
IsValidLocale
IsProcessorFeaturePresent
VirtualProtect
GetSystemInfo
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
RaiseException
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
FatalAppExitA
RtlUnwind
HeapSize
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
CloseHandle
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA

Sections

.text
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

349743a52334887b34c0f982b644af90

Headers

DLL Characteristics

File Characteristics

Imports

sfc

kernel32

Sections

.text Size: 241KB - Virtual size: 241KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 31KB - Virtual size: 208KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 241KB - Virtual size: 241KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 31KB - Virtual size: 208KB

.rsrc
Size: 12KB - Virtual size: 12KB