ba431365950418fceffee67bef71e96868d7f48604a7eaaf4d9b6ae4949b4edb

General

Target

ba431365950418fceffee67bef71e96868d7f48604a7eaaf4d9b6ae4949b4edb
Size

475KB
MD5

f0c088c1daee06da93afde0155d42fdf
SHA1

f40d6e7a9d6b6d532fa8783c50b0ac00ec2a2267
SHA256

ba431365950418fceffee67bef71e96868d7f48604a7eaaf4d9b6ae4949b4edb
SHA512

c538419bef93ff8aa2ae48035c1ca1058c180e7992b6f00cdf12dde8dcfa7df5f8519deadf162108f10187542daae481c770308b1a30930585ced96c2c99a792
SSDEEP

12288:GJ//eo9GB/6hxwLUeYFGdOOhoTksaB7g73Jm0:W/Go9gguL3T6kNBF0

Score

N/A

Malware Config

Signatures

Files

ba431365950418fceffee67bef71e96868d7f48604a7eaaf4d9b6ae4949b4edb
.exe windows x86

95e4fb3bd92bf33af40945519d089a28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentProcess
GetModuleHandleW
GetProcessAffinityMask
GetSystemInfo
LoadLibraryW
UnhandledExceptionFilter
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

user32

CreateWindowExW
DefWindowProcW
DispatchMessageW
GetMessageW
MoveWindow
PeekMessageW
RegisterClassExW
TranslateMessage

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95e4fb3bd92bf33af40945519d089a28

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 110KB - Virtual size: 109KB

.rdata Size: 273KB - Virtual size: 273KB

.data Size: 90KB - Virtual size: 93KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 110KB - Virtual size: 109KB

.rdata
Size: 273KB - Virtual size: 273KB

.data
Size: 90KB - Virtual size: 93KB

.rsrc
Size: 512B - Virtual size: 436B