936f124e2ec6a360945735294cb2c9c0ae8da355044b936795d0cd111e8c5dbb

General

Target

936f124e2ec6a360945735294cb2c9c0ae8da355044b936795d0cd111e8c5dbb
Size

61KB
MD5

0ce6a3b1e6004046b39012655a015d50
SHA1

28731556d0fed017dffd757bd88d4daf5e159b6c
SHA256

936f124e2ec6a360945735294cb2c9c0ae8da355044b936795d0cd111e8c5dbb
SHA512

cd1660474ada519aa67cd25aca245614bf0fbbd5cdfff3e67c699a698ff7c22d4a66c821ec1102b8f739baa175f75eba1378e6d34af65e7d64e7df4c48e4face
SSDEEP

1536:Bq+Tln5IUmDjoX+lzsP6DlcVIiuyWUCzyTB:BxTln5I9lYyD6VI4WXzq

Score

N/A

Malware Config

Signatures

Files

936f124e2ec6a360945735294cb2c9c0ae8da355044b936795d0cd111e8c5dbb
.exe windows x86

fa4d86a4e89ae79ea2a222aeb8f63583

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_except_handler3
_wtoi
_vsnwprintf

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetErrorMode
DeactivateActCtx
GetCurrentProcessId
GetFileAttributesW
SearchPathW
CreateActCtxW
ActivateActCtx
LoadLibraryW
ReleaseActCtx
LocalAlloc
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CloseHandle
SetFilePointer
ReadFile
CreateFileW
WaitForSingleObject
CreateProcessW
Wow64EnableWow64FsRedirection
lstrcpynW
GetSystemDirectoryW
GetNativeSystemInfo
IsWow64Process
GetCurrentProcess
GetCommandLineW
FreeLibrary
LocalFree
lstrlenA
WideCharToMultiByte
GetLastError
lstrlenW
GetProcAddress
FormatMessageW
GetSystemTimeAsFileTime

gdi32

GetStockObject

user32

CharNextW
SetClassLongW
LoadIconW
DefWindowProcW
CreateWindowExW
RegisterClassW
LoadCursorW
DestroyWindow
MessageBoxW
LoadStringW

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fa4d86a4e89ae79ea2a222aeb8f63583

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

gdi32

user32

imagehlp

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 884B

.rsrc Size: 53KB - Virtual size: 54KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 884B

.rsrc
Size: 53KB - Virtual size: 54KB