bdab28aae0f257090d700f804aa9bb180935afe71867c3d501501f3470d0ad58

General

Target

bdab28aae0f257090d700f804aa9bb180935afe71867c3d501501f3470d0ad58
Size

130KB
MD5

20cd5cae95613a6f9f1d94f542f0c7c0
SHA1

1db91e791020cb797b02c020adb019d2eed2fcd6
SHA256

bdab28aae0f257090d700f804aa9bb180935afe71867c3d501501f3470d0ad58
SHA512

d0c5635e490c7b1a100b6cea08a761876099637f7bba0bb0705267e452df6b073698f7614dd3794b28a8712b10fc90066b49698a08a96193b39a8029bd66693a
SSDEEP

3072:nJhr5L4UVPRt0jyheBshj+/OsTydRn+Wcf:f9Lfh3FhC/Os8uf

Score

N/A

Malware Config

Signatures

Files

bdab28aae0f257090d700f804aa9bb180935afe71867c3d501501f3470d0ad58
.exe windows x86

dd995849a26373017906ac9d8c643f62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW

kernel32

DeleteCriticalSection
GetCurrentDirectoryW
GetLocalTime
RtlUnwind
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW

user32

wsprintfW

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dd995849a26373017906ac9d8c643f62

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 73KB - Virtual size: 76KB

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 73KB - Virtual size: 76KB