1c5b0574ae88eae6bbfcbb9cf37728d91f5790a1c64d8c574b36415f10a14ffa

General

Target

1c5b0574ae88eae6bbfcbb9cf37728d91f5790a1c64d8c574b36415f10a14ffa
Size

264KB
MD5

314574cdd94a6c5035ec83217164be80
SHA1

a8ac14f0297d8444fb9e0fef4e38e0590116ee19
SHA256

1c5b0574ae88eae6bbfcbb9cf37728d91f5790a1c64d8c574b36415f10a14ffa
SHA512

d603c02632485aa07a12f57cf6c2e7a25d475bfb1b9b6272d8a1ffd1d6e0a54ab9e6069ab25e4555ef2df6417292ad589a935f33737d749bcec0676ead3f1d46
SSDEEP

6144:MhNvTd71BYzXh7eSinrQhwH6nV5xXGm3u+0rUkn:Qtd71BYzXh/GrUwCb7xkn

Score

N/A

Malware Config

Signatures

Files

1c5b0574ae88eae6bbfcbb9cf37728d91f5790a1c64d8c574b36415f10a14ffa
.exe windows x86

b92d636c0a608a18e2f2cae1eb8ffe47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleCreate
CoInitialize
StgCreateDocfile
CoUninitialize
CoSuspendClassObjects
OleUninitialize
OleInitialize

ddraw

DirectDrawCreate
DirectDrawCreateClipper

dhcpcsvc

DhcpRegisterParamChange
DhcpRemoveDNSRegistrations
DhcpDeRegisterParamChange
DhcpCApiInitialize
DhcpCApiCleanup

kernel32

GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
SetHandleCount
LCMapStringW
GetSystemInfo
SetTapePosition
VirtualProtect
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
HeapFree
InterlockedDecrement
InterlockedIncrement
GetLastError
MultiByteToWideChar
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
Sleep
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
LCMapStringA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b92d636c0a608a18e2f2cae1eb8ffe47

Headers

File Characteristics

Imports

ole32

ddraw

dhcpcsvc

kernel32

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 132KB - Virtual size: 129KB

.data Size: 72KB - Virtual size: 122KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 132KB - Virtual size: 129KB

.data
Size: 72KB - Virtual size: 122KB