d0ed96a6a89775723a6532513d4f8f609c763143b73d3c595f6d4f2be5fc4225

General

Target

d0ed96a6a89775723a6532513d4f8f609c763143b73d3c595f6d4f2be5fc4225
Size

24KB
MD5

1fd45bfe0f75cb06a0a86a8d43a2ab88
SHA1

e8d7e629655e17b70e4758d30696f7747711ffb0
SHA256

d0ed96a6a89775723a6532513d4f8f609c763143b73d3c595f6d4f2be5fc4225
SHA512

cc2fca7d3337e746c3ad1cb7f581db115d8dbd2a2f68e53b49064601f914b36ab1b88d6302d58edfb2f2047352d5241a7861d9af888184450d70d6c96f2b5545
SSDEEP

384:WIMDvI7bj1bf7bla9TNyiVO6Uhd7IWzFBsoar9fVMmzRxixCFC:Wi7bj1bf7pa9TNYFuhBfVMmzy

Score

N/A

Malware Config

Signatures

Files

d0ed96a6a89775723a6532513d4f8f609c763143b73d3c595f6d4f2be5fc4225
.exe windows x86

5e8817fc47d5cde96da657354bdab178

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_XcptFilter
__p___initenv
setlocale
iswdigit
exit
wcstol
vswprintf
malloc
wprintf
_wcsdup
fprintf
_iob
fwprintf
vfwprintf
printf
free

kernel32

FindNextFileW
GetACP
GetOEMCP
WideCharToMultiByte
FreeLibrary
LoadLibraryW
SetLastError
MultiByteToWideChar
GetModuleHandleW
FormatMessageW
WriteConsoleW
GetFileType
GetCurrentDirectoryW
GetLastError
FindFirstFileW
GetStdHandle
LocalFree
GetFileAttributesW
GetCommandLineW
LocalAlloc
VerifyVersionInfoW

winsta

LogonIdFromWinStationNameW
WinStationSetInformationW

user32

CharToOemW
OemToCharW
wvsprintfW
LoadStringW
wsprintfW

ntdll

_ultoa
wcscpy
wcschr
VerSetConditionMask
_wcslwr
memmove
wcstoul
wcscmp
_wcsnicmp
wcscat
wcslen
wcsncpy

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5e8817fc47d5cde96da657354bdab178

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

winsta

user32

ntdll

Sections

.text Size: 10KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 32KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 32KB