3623c3a9d0390dc4f1c6ea0eb9edc08abaf23e8415c70167a16cc937271f89c1

General

Target

3623c3a9d0390dc4f1c6ea0eb9edc08abaf23e8415c70167a16cc937271f89c1
Size

2.1MB
MD5

ef7ff172494e0ed2259018d5b0d5764e
SHA1

ef701a254164bf39c2b227710b2b9111480aa39d
SHA256

3623c3a9d0390dc4f1c6ea0eb9edc08abaf23e8415c70167a16cc937271f89c1
SHA512

5f450ec7362f5706510887bbe3d16eea59d6a1cf83025f8628397e34441048d37c9f60e38211014a7f894e2caf30ee89cee2ca9e54aa9a5597d3ac787c64d278
SSDEEP

49152:XQbKC+8gDy+yfg0MCTQKb0Ev4zf5KQrVnVcTx/eKwOIPSJ:NCPN+6FoU0e6fsSVnVOkK/IPS

Score

N/A

Malware Config

Signatures

Files

3623c3a9d0390dc4f1c6ea0eb9edc08abaf23e8415c70167a16cc937271f89c1
.exe windows x86

2a102bf9426fef6a2cb6d67114914dee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
HeapAlloc
HeapFree
InterlockedCompareExchange
GetProcessHeap
Sleep
LoadLibraryA
ExitProcess
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
GetModuleHandleExW
InitializeCriticalSection
TerminateThread
LeaveCriticalSection
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
EnterCriticalSection
OpenThread
CloseHandle
VirtualProtect
DeleteCriticalSection
GetCurrentThreadId
WriteFile
DeleteFileA
CreateProcessW
SystemTimeToFileTime
WaitForSingleObject
GetTickCount
TerminateProcess
GetModuleFileNameW
GetTempFileNameA
GetLocalTime
GetProcessId
GetTempPathA
WideCharToMultiByte
GetFileAttributesA
RemoveDirectoryA
GetModuleHandleA
SetCurrentDirectoryW
GetCurrentProcess
GetStdHandle
TlsAlloc
TlsGetValue
TlsSetValue
WriteConsoleA
IsBadReadPtr
RtlUnwind
RaiseException
SetFilePointer
ReadFile
GetCommandLineA
GetStartupInfoA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a102bf9426fef6a2cb6d67114914dee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 20KB - Virtual size: 30KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 20KB - Virtual size: 30KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 12KB - Virtual size: 12KB