4a1615fdf2f625ba36a33636558f5e9c3f1c64d535d6ecb3089dc1534d97f71a

General

Target

4a1615fdf2f625ba36a33636558f5e9c3f1c64d535d6ecb3089dc1534d97f71a
Size

126KB
MD5

0f7b864915efc6654da35e1e12c5b0b0
SHA1

1f702f44a69183886ad0625b50a2f4411ad915cf
SHA256

4a1615fdf2f625ba36a33636558f5e9c3f1c64d535d6ecb3089dc1534d97f71a
SHA512

7f76a69e4b4a22ceacf3a9bf995db901cd0203fe40382fc9517fb37a008387fe9fc691f563d80b0e397136b843530857d73d50ae5a8e9795f4177b6d3c40a66b
SSDEEP

3072:ANBscJ9zopIt5iAH3oKZtE/kZqWCtYEaXpWr:wBsM90x2ZGEwY5pWr

Score

N/A

Malware Config

Signatures

Files

4a1615fdf2f625ba36a33636558f5e9c3f1c64d535d6ecb3089dc1534d97f71a
.exe windows x86

02cbde0a685e631226c61d4086e10960

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
wsprintfA
MessageBoxA
wvsprintfA

kernel32

CompareStringW
CompareStringA
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
CopyFileA
GetFileAttributesA
SetFileAttributesA
lstrcatA
lstrcpyA
GetModuleFileNameA
GlobalFree
GlobalUnlock
GlobalHandle
_lclose
_lwrite
_llseek
_lcreat
_lopen
GlobalLock
GlobalAlloc
lstrlenA
GetSystemTimeAsFileTime
GetLastError
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
Sleep
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetEnvironmentVariableA
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
VirtualAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapSize
GetLocaleInfoA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

02cbde0a685e631226c61d4086e10960

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 75KB - Virtual size: 76KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 75KB - Virtual size: 76KB