d16252f2f50c4de305f9fbc3ec622f6c273ced080da7824e3552e5a058a9d416

Sharing

Copy URL

Twitter E-mail

General

Target

d16252f2f50c4de305f9fbc3ec622f6c273ced080da7824e3552e5a058a9d416
Size

1.4MB
MD5

ddc8af4bf7834642dc00cd0ad8aae7ba
SHA1

55a0c0e22c4eec9622e6b4027a8ddc0179a350bb
SHA256

d16252f2f50c4de305f9fbc3ec622f6c273ced080da7824e3552e5a058a9d416
SHA512

f3d40bedfadc0e54f463b7c1916d68180dabd1a7d98f8206e207f7a2f75b2cec4262e44a40e3b43200f563dc3cdd1cf0756198ee526ef55c0c5bbbbc61974ae3
SSDEEP

12288:BdTUP+GnzU4f6Rkl5iP1WA4prXIO2DAvEPCHoAucEmm/TJm38J3jjZZJL2yWT8fD:BZ860FA4TMAs9WYJm38JTnwyW8ou

Score

N/A

Malware Config

Signatures

Files

d16252f2f50c4de305f9fbc3ec622f6c273ced080da7824e3552e5a058a9d416
.exe windows x86

7220fb1a771ee7d5f2c9f51c5e67e400

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetTapePosition
GetBinaryTypeA
GetModuleFileNameW
GetLastError
IsDebuggerPresent
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
GetProcessHeap
OutputDebugStringW
GetCurrentActCtx
GetCPInfo
GetCommandLineW
HeapAlloc
EncodePointer
DecodePointer
RaiseException
RtlUnwind
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
HeapSize
IsValidCodePage
GetACP
GetOEMCP
SetLastError
GetCurrentThreadId
HeapFree
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
CreateFileW

gdi32

GetCharABCWidthsW

Sections

Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 207B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7220fb1a771ee7d5f2c9f51c5e67e400

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

Size: 56KB - Virtual size: 55KB

Size: 2KB - Virtual size: 1KB

Size: 28KB - Virtual size: 36KB

Size: 512B - Virtual size: 207B

Size: 512B - Virtual size: 480B

.rsrc Size: 1.3MB - Virtual size: 2.1MB

.rsrc
Size: 1.3MB - Virtual size: 2.1MB