16491a8b359cd375e64229b8287d43b8083da6e3109bbbd5f2afee35e642bf36

Sharing

Copy URL Twitter E-mail

General

Target

16491a8b359cd375e64229b8287d43b8083da6e3109bbbd5f2afee35e642bf36
Size

93KB
MD5

216aa98cb9c936b7e49e5147bd296f00
SHA1

82b2db6df44574fb0fdab9f0c1d08b05da31b835
SHA256

16491a8b359cd375e64229b8287d43b8083da6e3109bbbd5f2afee35e642bf36
SHA512

b1db2c88f4d158371c77aa557edbb80364352741e496137780017619b72a31c7d6f1056fefa6a71aa2e5a648af66364c8a53c50da3cb2c61f7304cd059e24577
SSDEEP

1536:YuJ2qdKK64dShIPoANJLlAXuSXv+qSFEAeOFw9Bbq/rMxObis0I:YO2qdKK9shIPFJRAhP2EAeJ9sjjGC

Score

N/A

Malware Config

Signatures

Files

16491a8b359cd375e64229b8287d43b8083da6e3109bbbd5f2afee35e642bf36
.exe windows x86

22300191c1c79f65815db76c38ca9037

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryExW
WriteFile
GetStdHandle
WideCharToMultiByte
GetConsoleOutputCP
GetCommandLineW
CloseHandle
CreateProcessW
RegisterApplicationRestart
GetCurrentProcessId
GetCommandLineA
GetModuleHandleW
SetThreadPreferredUILanguages
HeapSetInformation
DelayLoadFailureHook
InterlockedCompareExchange
LoadLibraryExA
Sleep
InterlockedExchange
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

msvcrt

_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
exit
_exit
__wgetmainargs
setlocale
strspn
mbstowcs
isspace
atoi
memset
__CxxFrameHandler3
_XcptFilter
_vsnwprintf
_vsnprintf
_cexit

wbemcomn

?GetWMIADAPCmdLine@@YGPAGH@Z
?GetMemLogObject@@YGPAVCMemoryLog@@XZ
?Write@CMemoryLog@@QAEXJ@Z
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z
?EnablePrivilege@@YGHKJ@Z
?DebugTrace@@YAHDPBDZZ

ntdll

EtwTraceMessage

shell32

CommandLineToArgvW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

22300191c1c79f65815db76c38ca9037

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

wbemcomn

ntdll

shell32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 13KB

.rsrc Size: 63KB - Virtual size: 62KB

.reloc Size: 18KB - Virtual size: 21KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 13KB

.rsrc
Size: 63KB - Virtual size: 62KB

.reloc
Size: 18KB - Virtual size: 21KB