91f91b965f483a8cc9a57d3c6ae1d23b275c980783c8cc47ec8eee92ea18c565

Sharing

Copy URL Twitter E-mail

General

Target

91f91b965f483a8cc9a57d3c6ae1d23b275c980783c8cc47ec8eee92ea18c565
Size

1.6MB
MD5

1ba1e82053fafcdcd5d87616f89953d1
SHA1

6b8cd008c17b73d0d4f464fbf58b263e7e51712b
SHA256

91f91b965f483a8cc9a57d3c6ae1d23b275c980783c8cc47ec8eee92ea18c565
SHA512

1c7d8e23e3deb7822e64d7821b11260823e961b3e2a6ef62bcf5d82f3e5a5c4cafffbe78f1bfee20787a986b4ddabac74cc870cc06cdc80288b59f0e360de1d7
SSDEEP

49152:BfMXpLyGe8gBLR9jljbkcH4teH9X64EyHO0S:BUZL28gBTR3kUJXpEy+

Score

N/A

Malware Config

Signatures

Files

91f91b965f483a8cc9a57d3c6ae1d23b275c980783c8cc47ec8eee92ea18c565
.exe windows x86

f377367cf081ea8770e70a2578975f63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameW
GetLastError
GetProcAddress
GetModuleHandleA
SetThreadContext
TerminateProcess
CloseHandle
CreateFileW
WriteConsoleW
SetStdHandle
MultiByteToWideChar
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
HeapFree
GetCommandLineW
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
HeapCreate
RaiseException
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WideCharToMultiByte
LCMapStringW
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryW
HeapSize
RtlUnwind
IsProcessorFeaturePresent
FlushFileBuffers

user32

wsprintfW

shell32

SHGetSpecialFolderPathW

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f377367cf081ea8770e70a2578975f63

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 18KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 18KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 5KB - Virtual size: 5KB