dbf36a5affc83b34aa506c2ff278453c681f4cfbe33d8e14a44e4c0624938aac

General

Target

dbf36a5affc83b34aa506c2ff278453c681f4cfbe33d8e14a44e4c0624938aac
Size

125KB
MD5

4dc0f64f0f0e8f59b28366fcd1c55a8d
SHA1

c00a41edab104a7de2242b6c782977b0dd9b32a3
SHA256

dbf36a5affc83b34aa506c2ff278453c681f4cfbe33d8e14a44e4c0624938aac
SHA512

b58129d60cc88199993a2ad4219142592d84b83e10485f75a4d4952713c8b2643b7fb39ed51ed7967e9552e08c1b13ac33ae835fc23dd317f824d2c5a2b6ba81
SSDEEP

1536:3sNxTQUzUgPH6Dz5+lXxXAXa4Gk/lnETHrLOxWFUzz0O1777gQR:5c6Dz5Qhw5Gk/lnAHOaW

Score

N/A

Malware Config

Signatures

Files

dbf36a5affc83b34aa506c2ff278453c681f4cfbe33d8e14a44e4c0624938aac
.exe windows x86

7221540756c272f34ed46f73e184f9d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileW

kernel32

QueryPerformanceCounter
VirtualFreeEx
CloseHandle
WaitForSingleObject
CreateRemoteThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
CreateProcessA
Sleep
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7221540756c272f34ed46f73e184f9d9

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 88KB - Virtual size: 88KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 88KB - Virtual size: 88KB