cf312624db6edb1a68f44e4755baa842936dbb89165b71595bd0dd51be1172c1

General

Target

cf312624db6edb1a68f44e4755baa842936dbb89165b71595bd0dd51be1172c1
Size

207KB
MD5

cee2e59ed232c264224c9c2bb77a37cc
SHA1

82f474f080ba900e1dcf8860a4592ef099fa50c8
SHA256

cf312624db6edb1a68f44e4755baa842936dbb89165b71595bd0dd51be1172c1
SHA512

27f12e9c32d88dc55e72767315eeb6467392a6775eed9f3fe5e642afe03dad81e06e501716f90fbd7eb4709211fd6193762fa2a1d369fffc705625c8c698c9cc
SSDEEP

6144:1qJteWBqqn1Sx4m/7yEa4Ft8epYB0QYBANd8wU/56DD1iZ6TdIjEQlZI1qFmUeqG:aAWBqqgx4m/7yEa4Ft8epYB0QYBANd8I

Score

N/A

Malware Config

Signatures

Files

cf312624db6edb1a68f44e4755baa842936dbb89165b71595bd0dd51be1172c1
.exe windows x86

5dd4eafe90af6a11bc3df7c1f62913a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumCalendarInfoW
Sleep
lstrcpynW
lstrcmpiA
GetCurrentConsoleFont
GetStringTypeW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCommandLineA
HeapSetInformation
IsProcessorFeaturePresent
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetSystemTimeAsFileTime

user32

OemToCharW
IsCharAlphaA
OemToCharBuffA
IsCharUpperA

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5dd4eafe90af6a11bc3df7c1f62913a1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 164KB - Virtual size: 163KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 15KB - Virtual size: 18KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 164KB - Virtual size: 163KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 15KB - Virtual size: 18KB

.rsrc
Size: 18KB - Virtual size: 18KB