34347469a6dcc81ab12ff961e818bf888949f52522985e293ae1c5d430606aba

General

Target

34347469a6dcc81ab12ff961e818bf888949f52522985e293ae1c5d430606aba
Size

714KB
MD5

0aa21d6edc8027d978b2d82bed00e370
SHA1

3fd3b8497e42efa9785057e1ed2fed7c434ba92b
SHA256

34347469a6dcc81ab12ff961e818bf888949f52522985e293ae1c5d430606aba
SHA512

1a39b716c2b6842da336144d237defaf82c26709b3359278b90d9039112025e3d9b150733d07627b9dc8f3bbf9abe9ab10b4a7f2a833d897b0c56c1e0822baa0
SSDEEP

12288:ks2hfppCxdogqQZ1RqePT+MFRXTPa24qGOf7ycU5GWblVy:ohvedogDRqQT+MF9TPkqGOPWbK

Score

N/A

Malware Config

Signatures

Files

34347469a6dcc81ab12ff961e818bf888949f52522985e293ae1c5d430606aba
.exe windows x86

b784012f9df9cdc2dcb480d04d476ea0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
CloseHandle
WriteFile
CreateFileW
GetModuleFileNameA
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
SetFilePointer
ReadFile
SystemTimeToFileTime
LocalFileTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
GetCurrentDirectoryW
SetFileTime
FlushFileBuffers
GetStartupInfoW
RtlUnwind
RaiseException
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
Sleep
InterlockedIncrement
InterlockedDecrement
GetProcAddress
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA

user32

wsprintfW

shell32

ShellExecuteW

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.9MB - Virtual size: 19.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b784012f9df9cdc2dcb480d04d476ea0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 179KB - Virtual size: 179KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 19.9MB - Virtual size: 19.9MB

.text
Size: 179KB - Virtual size: 179KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 19.9MB - Virtual size: 19.9MB