737d60372885e8709a95a4734b136c387ad27b272e7bedf6613dc397880a508c

General

Target

737d60372885e8709a95a4734b136c387ad27b272e7bedf6613dc397880a508c
Size

294KB
MD5

91988eafde79ee003d1b347cb9b72462
SHA1

2f40b06788c641081fba8db60e3d96007bde8230
SHA256

737d60372885e8709a95a4734b136c387ad27b272e7bedf6613dc397880a508c
SHA512

adb4c4d3a1fb11522e2a7135496b8c17f9ce52b9aa3a2b94bb635521dedef6441bd305c67a20c68a4c0acacdb86d5a81dbdf756cd0de97dc8c46d9e03c401c9f
SSDEEP

6144:6LT2CgL6qB0WZjwWWPT8wvZpHUdSAPJ09:22CgLNBLjwJr8cf0dS409

Score

N/A

Malware Config

Signatures

Files

737d60372885e8709a95a4734b136c387ad27b272e7bedf6613dc397880a508c
.exe windows x86

ffb6b90a5092e3d6eba1ede2086c69ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtQueryVirtualMemory
RtlUnwind
memset

kernel32

ExitProcess
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
HeapAlloc
GetModuleHandleW
Sleep
GetCommandLineA
GetStartupInfoA
RaiseException
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
LoadLibraryA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FreeLibrary
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleFileNameW
VirtualQuery
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ffb6b90a5092e3d6eba1ede2086c69ec

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

Sections

.text Size: 40KB - Virtual size: 39KB

.data Size: 253KB - Virtual size: 253KB

.text
Size: 40KB - Virtual size: 39KB

.data
Size: 253KB - Virtual size: 253KB