5d17eb502e7fa2a874080032ba9ddbf6e140270294b1a09ca03066a32731b9c0

General

Target

5d17eb502e7fa2a874080032ba9ddbf6e140270294b1a09ca03066a32731b9c0
Size

227KB
MD5

0a796964a42a539317e425a18f3c2231
SHA1

dec3c736429f870572c7bb171e640ed94076e89a
SHA256

5d17eb502e7fa2a874080032ba9ddbf6e140270294b1a09ca03066a32731b9c0
SHA512

229e51d9434f315162b35e0fe9a5a70bbc614d0573ade15e32a07a2953655ff0548aeeb75de51edecd65182e6df291fa5eba22999228e6f930904715639b14b4
SSDEEP

6144:IFGZUVOUtpoBWwMlewmL22T0jMTV/NtWY:xwOUfOMAVZhr

Score

N/A

Malware Config

Signatures

Files

5d17eb502e7fa2a874080032ba9ddbf6e140270294b1a09ca03066a32731b9c0
.exe windows x86

d649fb80a8d9a6b1cd12d2e8f96eef75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogA
GlobalAddAtomW
GetNamedPipeHandleStateA
VirtualAlloc
WaitForSingleObject
HeapAlloc
GetFileType
GlobalCompact
GetTempPathW
GlobalAddAtomA
CopyFileExW
GetFullPathNameA
OutputDebugStringA
GetSystemPowerStatus
GetExitCodeProcess
OpenEventW
EnumResourceTypesA
InitAtomTable
WriteProfileStringA
LoadLibraryA
HeapWalk
SetEnvironmentVariableW
GetFileInformationByHandle
EnumResourceTypesW
GetModuleHandleA
WriteProfileSectionA
GetProfileIntA
GetProcAddress
OpenWaitableTimerA
WritePrivateProfileSectionW
GetStringTypeA
LCMapStringW
GetStringTypeW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
MultiByteToWideChar

user32

SetScrollPos
GetClipCursor
GetWindowTextLengthW

Sections

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d649fb80a8d9a6b1cd12d2e8f96eef75

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 197KB - Virtual size: 197KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 197KB - Virtual size: 197KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB