3e14398fb540fc4dae9dbbb62c1246fbedd2b9eeb1020403b83ca70e494c4ff9

General

Target

3e14398fb540fc4dae9dbbb62c1246fbedd2b9eeb1020403b83ca70e494c4ff9
Size

145KB
MD5

0c3f2033580a75f99e4f976c8a521f36
SHA1

52eda969ce6e5d7b6e162292c4d4b645cfc5774d
SHA256

3e14398fb540fc4dae9dbbb62c1246fbedd2b9eeb1020403b83ca70e494c4ff9
SHA512

c3781b781661f1ba66fc235e4c299882a81fe3e193cfae84b1541f3018513407dfe095c01f929d9f7efc9e71dbecc15272391dffad95afbb1b327c1542912bf8
SSDEEP

3072:nWX5lGlSQFTUwIaHoxVtfPQUZXoRcj36UZJGI5CJwNYe:WXj4ywIFxHXZXoR436UuIoL

Score

N/A

Malware Config

Signatures

Files

3e14398fb540fc4dae9dbbb62c1246fbedd2b9eeb1020403b83ca70e494c4ff9
.exe windows x86

d8c14404b7f7bfe9b81440376305e364

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
WaitForSingleObject
GetTickCount
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
CloseHandle

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d8c14404b7f7bfe9b81440376305e364

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 73KB - Virtual size: 72KB

.reloc Size: 6KB - Virtual size: 80KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 73KB - Virtual size: 72KB

.reloc
Size: 6KB - Virtual size: 80KB