f4aabc3f6ff1835e67f16b50c8a8a39144f5ef3d34c62dcd6a6ddaef0b1771ae

General

Target

f4aabc3f6ff1835e67f16b50c8a8a39144f5ef3d34c62dcd6a6ddaef0b1771ae
Size

232KB
MD5

422d6f67b541fbdd3c26de21931c6be0
SHA1

e5aaee79c9b2402eeb3b72f98b8499f2324af912
SHA256

f4aabc3f6ff1835e67f16b50c8a8a39144f5ef3d34c62dcd6a6ddaef0b1771ae
SHA512

ab5735d930d78cc9d7cc65bad5c9949bdb7022b3027f6448c090748c749eae4d371bf0eea3bb72061ae1394bdfadd4dd87018abc11f0aed9f78a1df25f9224dd
SSDEEP

6144:FbeRojwlnQAnAZV9P1IigCKueb9HWOqGJFo:FbeRoj+sVxW7n9HWe3

Score

N/A

Malware Config

Signatures

Files

f4aabc3f6ff1835e67f16b50c8a8a39144f5ef3d34c62dcd6a6ddaef0b1771ae
.exe windows x86

6f86b04f977ca4c4ececc96b14bf461c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDiskFreeSpaceA
RaiseException
WritePrivateProfileStringA
CreateFiberEx
GetSystemTimeAsFileTime
GetNumaProcessorNode
GlobalUnfix
GetTapeStatus
IsSystemResumeAutomatic
GetProcAddress
GetModuleHandleA
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetHandleCount
GetFileType
SetFilePointer
GetFullPathNameA
GetCurrentDirectoryA
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
CreateFileA
HeapSize
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalAlloc
CreateDirectoryA

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6f86b04f977ca4c4ececc96b14bf461c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 117KB - Virtual size: 116KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 99KB - Virtual size: 107KB

.text
Size: 117KB - Virtual size: 116KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 99KB - Virtual size: 107KB