56ed752848b10407fc754c492f54f7d12554e7b0af2881d817d8a9b3382e4ff9

General

Target

56ed752848b10407fc754c492f54f7d12554e7b0af2881d817d8a9b3382e4ff9
Size

804KB
MD5

438c9608bcf2ab8b281135a37e1ba1d6
SHA1

095173086096a657d5583237a73ef986b0561c07
SHA256

56ed752848b10407fc754c492f54f7d12554e7b0af2881d817d8a9b3382e4ff9
SHA512

9557cf36a4fc4b4547c51b78a10a6808faae0d65b780c7045c1dcbf9d44b7fe5738c865c415813670bb8147c159aaa4fc26e5e3edc9b9234fc3082bef9f581c2
SSDEEP

12288:q+yPnPw2cQLVUavACJXxz6Im4jaydrzkcZmjQ0s/YXtH4C46qBchY65xc5SB:m9YmXxNFtHmjQ0ospcPBcNc

Score

N/A

Malware Config

Signatures

Files

56ed752848b10407fc754c492f54f7d12554e7b0af2881d817d8a9b3382e4ff9
.exe windows x86

acd76bccb2e06a1319e2f1c54c585739

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateDirectoryA
SetEvent
OpenEventW
OpenMutexW
HeapDestroy
VirtualProtect
SetFileTime
LeaveCriticalSection
AddAtomA
GetModuleFileNameA
CreateFileW
lstrlenA
CreateFileW
SetFilePointer
GetFileAttributesW
PulseEvent
GetModuleHandleA
GetVolumePathNameW
DeleteFileW
InterlockedExchange
IsValidLocale
GlobalFlags
DeleteFileW
GetTickCount
GetCurrentThreadId

user32

DestroyMenu
GetWindowLongA
DispatchMessageA
GetWindowTextA
SetRect
SetFocus
DestroyIcon
MessageBoxA
LoadCursorA
IsMenu
PeekMessageA
wsprintfA
GetWindowLongA

dmdskmgr

?namecmp@@YGHPBG0@Z
DllGetClassObject
DllCanUnloadNow
DllRegisterServer

advapi32

IsValidAcl

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 794KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

acd76bccb2e06a1319e2f1c54c585739

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

dmdskmgr

advapi32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 794KB - Virtual size: 2.2MB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 794KB - Virtual size: 2.2MB