6d4b032780cab34ee0bd9e5bbad00bf60f6eb4197a8d9ee21de90ed7d36167bc

Sharing

Copy URL Twitter E-mail

General

Target

6d4b032780cab34ee0bd9e5bbad00bf60f6eb4197a8d9ee21de90ed7d36167bc
Size

1009KB
MD5

1c5a2191980795a5f5f3274c654a2fd0
SHA1

f2a7a33aaa671fa71ad2479b91bdc71d6cf71b17
SHA256

6d4b032780cab34ee0bd9e5bbad00bf60f6eb4197a8d9ee21de90ed7d36167bc
SHA512

e65a7a64625f4a486c84a4277ab067b88622f8b7f00ef61960ead57299d27d0c8d221f587c6ceb6a2abaed265a8438e2e7cbe81c281e71fbc8d948b5a3888219
SSDEEP

24576:pE7TlRvbbgEdw+wRwyflutPz7DZP6sJ9kEz9i80T1NQz6h:pATlbdn2TutPz7D3J9kEc80T1iO

Score

N/A

Malware Config

Signatures

Files

6d4b032780cab34ee0bd9e5bbad00bf60f6eb4197a8d9ee21de90ed7d36167bc
.exe windows x86

fdb0c863ddbbf0481c935a3399165e96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
HeapFree
HeapAlloc
GetProcessHeap
VirtualAlloc
CloseHandle
CreateFileA
VirtualFree
SwitchToThread
CreateThread
OpenThread
GetCurrentThreadId

user32

DestroyWindow
CreateWindowExA
CloseClipboard
EmptyClipboard
OpenClipboard
FindWindowA

ole32

CoInitialize
CoUninitialize

dhcpcsvc

DhcpRequestParams

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fdb0c863ddbbf0481c935a3399165e96

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

dhcpcsvc

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 145KB - Virtual size: 152KB

.tls Size: 512B - Virtual size: 21B

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 188KB - Virtual size: 192KB

.text Size: 188KB - Virtual size: 192KB

.text Size: 188KB - Virtual size: 192KB

.text Size: 188KB - Virtual size: 192KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 145KB - Virtual size: 152KB

.tls
Size: 512B - Virtual size: 21B

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 188KB - Virtual size: 192KB

.text
Size: 188KB - Virtual size: 192KB

.text
Size: 188KB - Virtual size: 192KB

.text
Size: 188KB - Virtual size: 192KB