bb1635a3e4f2dc432cd7a0b2f8d103838afdd34d26135f84c92b084443ae72b5

General

Target

bb1635a3e4f2dc432cd7a0b2f8d103838afdd34d26135f84c92b084443ae72b5
Size

247KB
MD5

0df7854169f08ffca13770a18a09cac1
SHA1

cd833268b54f47b6547bde7a4480f1022e2a3b16
SHA256

bb1635a3e4f2dc432cd7a0b2f8d103838afdd34d26135f84c92b084443ae72b5
SHA512

1e64a1c34b3f078a91925206975d23a3196ac9c9170155d401493f8c8aee9d7e1a6170ce33d7e0045b33ef524e92a940a5ac134b16498ef08b80fc5c37bb35a7
SSDEEP

3072:8fvLCJJ73iagThbVLytpcyE4CbDaN/TYapNXfNoCyFJ/TuasXqe52K3MNS7:8fYJ2JZlVb2N/tptf+PHsXX6K

Score

N/A

Malware Config

Signatures

Files

bb1635a3e4f2dc432cd7a0b2f8d103838afdd34d26135f84c92b084443ae72b5
.exe windows x86

6ef72e589cf842ce4ba93e92c9f3fe37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteFileW
SetFileAttributesW
IsProcessorFeaturePresent
HeapReAlloc
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetStringTypeW
GetCPInfo
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
GetLocalTime
GetLastError
lstrlenW
GetModuleHandleW
HeapCreate
WaitForSingleObject
GetCurrentProcess
GetACP
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement

user32

DestroyWindow
SetCursor
GetWindowRect
GetParent
LoadMenuA
LoadIconA
SetCursorPos
GetAncestor
GetWindowLongA
EndDialog
GetCursorPos
MessageBoxW
MapWindowPoints
RegisterClassA

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ef72e589cf842ce4ba93e92c9f3fe37

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 157KB - Virtual size: 191KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 157KB - Virtual size: 191KB

.rsrc
Size: 11KB - Virtual size: 10KB