24084f2b385083a4a1d34cf5780021de21186a6a7dbba56b963b3c60f06ac7d1

General

Target

24084f2b385083a4a1d34cf5780021de21186a6a7dbba56b963b3c60f06ac7d1
Size

237KB
MD5

85c6add4b700b63d2ea3ee390c25a3c9
SHA1

98291b435ce7913520c154ff855dc4dec177449c
SHA256

24084f2b385083a4a1d34cf5780021de21186a6a7dbba56b963b3c60f06ac7d1
SHA512

58016b786f00015e6538c1c9760a656b0b39e0303539a10bf111984dd809c7bd87316578ba298f0f31d582f292d9b98d5d51e70f2061af6c5fb22be5eaec83b6
SSDEEP

6144:SYKSbwlGB2KX3w4Lh+00izOMkpRr3L9HKnQg1sMlLMPRc9Y5X:gUwlGBJw4zBzOMkb5qnL9+0Y9

Score

N/A

Malware Config

Signatures

Files

24084f2b385083a4a1d34cf5780021de21186a6a7dbba56b963b3c60f06ac7d1
.exe windows x86

fbd343429d07dfc51fd2b6914feb36b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualProtect
GetModuleFileNameA
GetConsoleMode
GetModuleHandleA
GetProcAddress
lstrlenA
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
IsProcessorFeaturePresent
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
HeapReAlloc
LCMapStringW
GetStringTypeW
GetConsoleCP
FlushFileBuffers
SetFilePointer
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW

user32

EnumWindows
LoadMenuA
GetComboBoxInfo

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbd343429d07dfc51fd2b6914feb36b7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 3KB - Virtual size: 3KB