5425bd353e1ded2559261a382c427ce529571a111e5949d3ad47d2190250c828

General

Target

5425bd353e1ded2559261a382c427ce529571a111e5949d3ad47d2190250c828
Size

608KB
MD5

3be2a956d689fe45ff09bd6ecc43bde6
SHA1

670282d65cd2f64d9452d7336ea7ef10b13f8fa9
SHA256

5425bd353e1ded2559261a382c427ce529571a111e5949d3ad47d2190250c828
SHA512

0183e21c7f6919d2aa1f13c4122537ace9fc42fb337807d680c6acf53f3236eb19d967e38e560ce58928ea3c03a81d6707dedf8e958e52fcf7d7760f730aeb75
SSDEEP

1536:gSDMQlcWwp2e2rYMEzHTzX1Zx2p2Vn8Ji/q+wZEhYoCQ1JTKVHtyrt/Q:gSDuxoevzH31KJiJR6EJTiHcrRQ

Score

N/A

Malware Config

Signatures

Files

5425bd353e1ded2559261a382c427ce529571a111e5949d3ad47d2190250c828
.exe windows x86

75eb68ad46f6cfac6bfc36f76e8f4ce2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
HeapDestroy
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
GetLocaleInfoW
GetLocaleInfoA
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 167KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

75eb68ad46f6cfac6bfc36f76e8f4ce2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 356KB - Virtual size: 355KB

.data Size: 167KB - Virtual size: 175KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 356KB - Virtual size: 355KB

.data
Size: 167KB - Virtual size: 175KB