0e625f4ae4795a7da95ababfe9a414a67b96e2d30c9eae74bcebe931e9135ee5

General

Target

0e625f4ae4795a7da95ababfe9a414a67b96e2d30c9eae74bcebe931e9135ee5
Size

234KB
MD5

0a7769fbd02edbc0ccfa8795f95d22b3
SHA1

d5899e1dba3b7ab7bc08b8ac426950a0643bf853
SHA256

0e625f4ae4795a7da95ababfe9a414a67b96e2d30c9eae74bcebe931e9135ee5
SHA512

94bf91a2407d52036b76e177bbcedd052f4aa567460d46bbe6f54de40c3270df3f978c653287fc5d02c1802c5c6ea05751d7e1d8b325f1b8885c7e3837e1502e
SSDEEP

6144:TUDcV1LJcIzOJUvZJ5bQnK7+C7UTs+ho3yE:TUDcV1NcvqvZX6rCes+ho3yE

Score

N/A

Malware Config

Signatures

Files

0e625f4ae4795a7da95ababfe9a414a67b96e2d30c9eae74bcebe931e9135ee5
.exe windows x86

de65586f4565bfc1160b21dabe927b79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
PulseEvent
GetModuleHandleW
GetTickCount
VirtualFree
GetSystemPowerStatus
GetModuleFileNameW
FlushInstructionCache
GetNamedPipeHandleStateW
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleHandleA
VirtualProtect
ResumeThread
GetLastError
HeapFree
HeapAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de65586f4565bfc1160b21dabe927b79

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 156KB - Virtual size: 155KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 156KB - Virtual size: 155KB