820ad5e956bf0e6a11f257a334a69d88e55713f111d4596121ef749f0b00ec43

General

Target

820ad5e956bf0e6a11f257a334a69d88e55713f111d4596121ef749f0b00ec43
Size

118KB
MD5

06752bfdd2bee7b7a008ef8a3dcf87a8
SHA1

04701ed7232e5b67ef00d01846a566befaf8f8e8
SHA256

820ad5e956bf0e6a11f257a334a69d88e55713f111d4596121ef749f0b00ec43
SHA512

cc6d41260c0a756b4b8b6c715452314bc45fefff6f39b8c362e88361be87de932040977038e9c3a9da84009703084186e6689a042da0aece19dd079b22e9673b
SSDEEP

1536:tdBXIcTLmyMWWep9HYBRTYU/b7OBlAkch7cgL9sKUGugpMcPzrBEm5d7ZzZt448:/BUyMep+XYG7OBWkCuhgVEm5dd96v

Score

N/A

Malware Config

Signatures

Files

820ad5e956bf0e6a11f257a334a69d88e55713f111d4596121ef749f0b00ec43
.exe windows x86

2e80c00d68efcf6d11ca6cbbc73bd947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2e80c00d68efcf6d11ca6cbbc73bd947

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 10KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 436B

.erdata Size: 4KB - Virtual size: 4KB

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 10KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 436B

.erdata
Size: 4KB - Virtual size: 4KB