6d1f0e77810adfe0ee49eb507f4d5bd829e40fd0a7d6a36d03a0b0304a72bc9d

General

Target

6d1f0e77810adfe0ee49eb507f4d5bd829e40fd0a7d6a36d03a0b0304a72bc9d
Size

59KB
MD5

e38c2be2b7005654274067c165bf5cd1
SHA1

4b07dab46df1aca0342806abeeed8adb82680844
SHA256

6d1f0e77810adfe0ee49eb507f4d5bd829e40fd0a7d6a36d03a0b0304a72bc9d
SHA512

32afcaf03ff90d997fecb08adf8e4c117abbef14401e2d0caaeee32c4637811bd3bfe2d5e8d8d966beddf098116d9153f7f9cc38abb39ea80239aeffb71a38b8
SSDEEP

768:RjHySxTmk7Ey5P9CSZP78f4OpZcLhYgAi2iXKTpAeo2B7P42MJHjF0pR:RjLd7tVdgfVZgRAi9Ne5B7Pat

Score

N/A

Malware Config

Signatures

Files

6d1f0e77810adfe0ee49eb507f4d5bd829e40fd0a7d6a36d03a0b0304a72bc9d
.exe windows x86

131ceeafde7794d8a506e5a5446b2bfd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

sxs

SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsGenerateActivationContext
SxsUninstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW
SxsInstallW

shell32

IsLFNDrive
PathIsExe
SHAlloc
ShellAboutW
SHAppBarMessage

kernel32

HeapCreate
GetWindowsDirectoryW
MulDiv
GetConsoleMode
_lopen
FindClose
GetACP
LZRead
MulDiv
MulDiv
GetMailslotInfo
GetConsoleTitleA
GlobalFree
DeleteAtom
MulDiv
MulDiv
MulDiv
GlobalFree
DeleteFiber
EnterCriticalSection
RtlUnwind
IsBadReadPtr
SetStdHandle
GlobalFix
EncodeSystemPointer
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
Beep
ConvertFiberToThread
EncodePointer
HeapWalk
LCMapStringW
LCMapStringA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

131ceeafde7794d8a506e5a5446b2bfd

Headers

File Characteristics

Imports

sxs

shell32

kernel32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 51KB - Virtual size: 52KB

.DATA Size: 512B - Virtual size: 8KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 51KB - Virtual size: 52KB

.DATA
Size: 512B - Virtual size: 8KB