9d42c56e4f405c641d054896557e5ea302e248b61181552df438278f974c9b8d

General

Target

9d42c56e4f405c641d054896557e5ea302e248b61181552df438278f974c9b8d
Size

804KB
MD5

04b7861d6f61d9d64cbf7dc38a41d5d0
SHA1

1748e0d4c20a64461fe37ce9387df56745e869df
SHA256

9d42c56e4f405c641d054896557e5ea302e248b61181552df438278f974c9b8d
SHA512

922c6fb9f74114cefc46311837c72aadc361a40931bf034df89ecb1e672fc483a330390a8c9d92ec89b5786c3a0769056839543348193fdbfa10ea8b6af59fd8
SSDEEP

24576:TqUxWnONPPwEgoKsz4PMrXLj70HiCSQea7H6mqz:9wEgoSP2bsiCSQ

Score

N/A

Malware Config

Signatures

Files

9d42c56e4f405c641d054896557e5ea302e248b61181552df438278f974c9b8d
.exe windows x86

701b7ec27bc1c284ee96beb7dff8680a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

OpenMutexW
GetFileAttributesW
IsValidLocale
CreateFileW
HeapDestroy
GetModuleFileNameA
SetEvent
CreateFileW
LeaveCriticalSection
SetFileTime
CreateDirectoryA
GlobalFlags
AddAtomA
PulseEvent
InterlockedExchange
GetCurrentThreadId
lstrlenA
GetVolumePathNameW
VirtualProtect
OpenEventW
GetTickCount
SetFilePointer
DeleteFileW
GetModuleHandleA
DeleteFileW

user32

SetFocus
GetWindowTextA
IsMenu
SetRect
GetWindowLongA
DestroyMenu
DestroyIcon
LoadCursorA
MessageBoxA
GetWindowLongA
wsprintfA
DispatchMessageA
PeekMessageA

dmdskmgr

?namecmp@@YGHPBG0@Z
DllGetClassObject
DllRegisterServer
DllCanUnloadNow

advapi32

IsValidAcl

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 794KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

701b7ec27bc1c284ee96beb7dff8680a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dmdskmgr

advapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 794KB - Virtual size: 2.2MB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 794KB - Virtual size: 2.2MB