a1b52a516b0f20a2d5f146c5427ae46b7910b841ffe765551fa493c3dbb1de27

Sharing

Copy URL

Twitter E-mail

General

Target

a1b52a516b0f20a2d5f146c5427ae46b7910b841ffe765551fa493c3dbb1de27
Size

374KB
MD5

ad26985fbe68f9d225db5a4fbbc64366
SHA1

6e5597bdffd9dc932b8df034396c04203ed8f1ac
SHA256

a1b52a516b0f20a2d5f146c5427ae46b7910b841ffe765551fa493c3dbb1de27
SHA512

96891600a383acb2f3a37d31adc70faae0368f977c7d0ef1276bd273874e8a24e7556f428d190f1ea42273e61bb7d2f5508502b97bbc0fed9292db2a8307f0c3
SSDEEP

6144:QalwHn21rKSayH96IYKViyjrS8FxC57m0JHsvviKt9lq8UOaeO:L+21OSae1PjrLFMw0CDt9lqVR

Score

N/A

Malware Config

Signatures

Files

a1b52a516b0f20a2d5f146c5427ae46b7910b841ffe765551fa493c3dbb1de27
.exe windows x86

9f566e26326011bebd95376e8f3c960c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetComputerNameA
GetCurrentDirectoryA
VirtualAlloc
GetLastError
lstrlenA
LoadLibraryA
FindNextFileW
FindCloseChangeNotification
SetFilePointerEx
InterlockedCompareExchange
ExitProcess
WaitForSingleObjectEx
SetFilePointer
GetVersionExW
GlobalFree
GetLocaleInfoA
CreateFileMappingA
LockResource
GetModuleHandleA
FreeEnvironmentStringsW
FindFirstFileA
GetExitCodeProcess
DeleteFileW
GlobalUnlock
SetLastError
Sleep
WriteConsoleW
CreateEventW
GetModuleHandleW
GlobalLock
LCMapStringA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
GetStartupInfoW
GlobalAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
IsValidLocale
SetEnvironmentVariableA

user32

TrackPopupMenu
SetWindowTextW
GetMenu
CreateWindowExW
SetMenuContextHelpId
GetWindowLongW

advapi32

GetUserNameA

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 301KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f566e26326011bebd95376e8f3c960c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 301KB - Virtual size: 340KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 301KB - Virtual size: 340KB

.rsrc
Size: 17KB - Virtual size: 16KB