783884c5703079a61c4d052c560d83a066b3773f25c6b92470019818648bdb2f

General

Target

783884c5703079a61c4d052c560d83a066b3773f25c6b92470019818648bdb2f
Size

212KB
MD5

a79397b0abf6827d3fe59bdd94989cbd
SHA1

e7d2ff5fa2d9015e75b9237782d19a84f30e1f5e
SHA256

783884c5703079a61c4d052c560d83a066b3773f25c6b92470019818648bdb2f
SHA512

2c129e1f01d0f6fcb737927986005f45e8372cd17f96d858d86a4241bda4672c47082391ac7437ee8c3466cdb849b67771acbcc6715ca9159ec50f88fae8bc1f
SSDEEP

3072:8h0hr/P//MBPPJotPHoAlPFIDEP9pOQPUlLpU4VnfQ5z/B7+i:KCP/0PJGoAleEPHOWC1JfQBp7J

Score

N/A

Malware Config

Signatures

Files

783884c5703079a61c4d052c560d83a066b3773f25c6b92470019818648bdb2f
.exe windows x86

19638a3e70c0c1bf81d93391c7df73a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
OpenMutexW
VirtualAlloc
GetCurrentDirectoryA
GetConsoleCP
GetWindowsDirectoryW
GetTickCount
OutputDebugStringW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
CloseHandle
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
LoadLibraryW
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW

user32

GetDesktopWindow
IsWindowUnicode

advapi32

GetUserNameW
GetUserNameA

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19638a3e70c0c1bf81d93391c7df73a1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 117KB - Virtual size: 116KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 117KB - Virtual size: 116KB