5a236baf807d73e8b46002be97362172541c9a4ea4c5898b65c2b3611f008c99

Sharing

Copy URL Twitter E-mail

General

Target

5a236baf807d73e8b46002be97362172541c9a4ea4c5898b65c2b3611f008c99
Size

257KB
MD5

44f09ecaeca23c54c368355c4e3c4556
SHA1

309418320f50f66c2bee513a180f3d62cd21e65a
SHA256

5a236baf807d73e8b46002be97362172541c9a4ea4c5898b65c2b3611f008c99
SHA512

90020a3aee346e266e7437c40657c0871522f20ca468c7ee92ced8336316e0a867edf21429a3d09370420bf2666b6e4ec8148ae9d8075668fdb3a1365feaff42
SSDEEP

6144:yDd0J8Ew0mpD2wCrOJh3Sq4GgpWwxliIfol0P14hN:yDd0J7mpD2NOsGKWwriIfYIW

Score

N/A

Malware Config

Signatures

Files

5a236baf807d73e8b46002be97362172541c9a4ea4c5898b65c2b3611f008c99
.exe windows x86

72bbdd00b322e70f59e8a95d25f454c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileType
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetUserDefaultLCID
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
ExitProcess
InitializeCriticalSection
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
CreateFileA
EnumSystemLocalesA
EnterCriticalSection
HeapReAlloc
DeleteCriticalSection

user32

LoadIconA
GetSystemMetrics
ShowCursor
LoadCursorA
RegisterClassExA
ShowWindow
UpdateWindow

gdi32

GetStockObject

advapi32

RegOpenKeyW

ole32

CoTaskMemAlloc

Sections

.flat
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.442441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.341441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.441441
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72bbdd00b322e70f59e8a95d25f454c1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.flat Size: 512B - Virtual size: 100B

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 237KB - Virtual size: 236KB

.442441 Size: 512B - Virtual size: 100B

.341441 Size: 512B - Virtual size: 100B

.441441 Size: 512B - Virtual size: 100B

.rsrc Size: 1KB - Virtual size: 1KB

.flat
Size: 512B - Virtual size: 100B

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 237KB - Virtual size: 236KB

.442441
Size: 512B - Virtual size: 100B

.341441
Size: 512B - Virtual size: 100B

.441441
Size: 512B - Virtual size: 100B

.rsrc
Size: 1KB - Virtual size: 1KB