dfb2f5f74834edd491accb6b49cd75b031435387b7431d434881b59cc2cec51a

General

Target

dfb2f5f74834edd491accb6b49cd75b031435387b7431d434881b59cc2cec51a
Size

13KB
MD5

42e7a7fd538bdb4125ec836a23d4b1cb
SHA1

1d16e39482037203a5f56885150e1f8515bccabc
SHA256

dfb2f5f74834edd491accb6b49cd75b031435387b7431d434881b59cc2cec51a
SHA512

0b86efee01a93c40c0264587ea87e3bba5837b1a7a9b7d02fab301de13c2aa7f402c3e4d6a20f051eebf841b87fb4d3d1c7524d6aedc56d414032a6cf77e5585
SSDEEP

384:UJiMxz674+xxnJ3g0Em6PzBIrO7UYRr9JdI55t:UJiMxzYhxxnJvEm2+rOAm5Jq5

Score

N/A

Malware Config

Signatures

Files

dfb2f5f74834edd491accb6b49cd75b031435387b7431d434881b59cc2cec51a
.exe windows x86

885e37cdb0575bf68d79918bd33bc67e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
HeapFree
GetProcessHeap
CreateThread
SetErrorMode
lstrcpyA
GetVersionExA
GetCurrentProcessId
HeapAlloc
HeapReAlloc
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
HeapCreate
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
DeleteCriticalSection
GetFileType
InitializeCriticalSection
SetHandleCount
GetFileSize
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
GetModuleHandleW
GetProcAddress
SetUnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetCPInfo
GetACP
ExitProcess
GetLastError
CreateMutexA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
WriteFile
GetTimeFormatA
GetLocalTime
SetFilePointer
CreateFileA
GetCurrentProcess
VirtualProtect
LoadLibraryA
lstrlenA
CloseHandle
GetEnvironmentStringsW
Sleep

user32

GetWindowTextA
IsWindowVisible
EnumWindows
MessageBoxA
SetWindowTextA
ShowWindow
SendMessageA
wsprintfA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

885e37cdb0575bf68d79918bd33bc67e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: - Virtual size: 3KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: - Virtual size: 3KB