52aabcc563f329bc6d910f9a02a10cf8620129fd292f1c98ecadedc29cdddb34

General

Target

52aabcc563f329bc6d910f9a02a10cf8620129fd292f1c98ecadedc29cdddb34
Size

506KB
MD5

0f7381d95c2499be818104fe04e570d0
SHA1

ffb9388d3189dfe302c8701f20df077dd0bb2af9
SHA256

52aabcc563f329bc6d910f9a02a10cf8620129fd292f1c98ecadedc29cdddb34
SHA512

69a1ddd06f998ced887e0dd3396c8c927ff5633cb6d1085a0dc87048e77c6738bcded0fd3075a9e5640811f19107def4fe10204c8bc3f51c921ff7becbc133d1
SSDEEP

12288:s6os34aH/2BjrUzFcLyDc8WdFPHIVNUtVUH6mNUFvTYz9yn:m2hclu6PF8zs

Score

N/A

Malware Config

Signatures

Files

52aabcc563f329bc6d910f9a02a10cf8620129fd292f1c98ecadedc29cdddb34
.exe windows x64

5b6afc48f6d30fc17f1a4144505cb404

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetThreadUILanguage
WriteFile
WideCharToMultiByte
GetConsoleMode
FormatMessageW
WriteConsoleW
GetConsoleOutputCP
GetStdHandle
GetFileType
HeapSetInformation
LocalFree
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
RtlCaptureContext

msvcrt

exit
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_cexit
_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
wcscpy_s
setlocale
wcscat_s
_wsystem
_ultow
malloc
_wcsnicmp
free
_initterm

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 496KB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5b6afc48f6d30fc17f1a4144505cb404

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 240B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 66B

.vmp0 Size: 496KB - Virtual size: 1.8MB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 240B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 66B

.vmp0
Size: 496KB - Virtual size: 1.8MB