45ce2189343f134a750037c51db1e5166de0c3530344bd5e7513bd4f75405b01

General

Target

45ce2189343f134a750037c51db1e5166de0c3530344bd5e7513bd4f75405b01
Size

128KB
MD5

202414fdf42f91cf0984ffba3df1383e
SHA1

2206553facf0c1f8e7bb13af9c1db9fd58c35fff
SHA256

45ce2189343f134a750037c51db1e5166de0c3530344bd5e7513bd4f75405b01
SHA512

e7a0fdbc54b98314b59cea85aa175b462cb46fcb6634f1a5d482726ab8e850682017fd834f9bb29169e97ac86d35792a125d918371e6d99697dc2d3f2929204a
SSDEEP

3072:nVC3GyBcIejk7T0D5mIdX1Am1lPBCWXRpp:V0GyBcoAFAm/vRpp

Score

N/A

Malware Config

Signatures

Files

45ce2189343f134a750037c51db1e5166de0c3530344bd5e7513bd4f75405b01
.exe windows x86

c49c56ed100e826717f7f0ebc892c0e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

GradientFill
AlphaBlend

kernel32

UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
WriteConsoleW
CloseHandle
CreatePipe
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 577KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CODE
Size: 4KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c49c56ed100e826717f7f0ebc892c0e0

Headers

DLL Characteristics

File Characteristics

Imports

msimg32

kernel32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 40KB - Virtual size: 577KB

.CODE Size: 4KB - Virtual size: 48B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 40KB - Virtual size: 577KB

.CODE
Size: 4KB - Virtual size: 48B

.reloc
Size: 4KB - Virtual size: 3KB