71b4bbc1a688a45ded84bda4235e69af4e5f46128a755442c7980f2df401014c

General

Target

71b4bbc1a688a45ded84bda4235e69af4e5f46128a755442c7980f2df401014c
Size

193KB
MD5

21e5b0449d8e7eed4d2cbdfe579d9433
SHA1

37b9068fffb8d8881e65d74f7759f800769db71c
SHA256

71b4bbc1a688a45ded84bda4235e69af4e5f46128a755442c7980f2df401014c
SHA512

079a4494cc28c4028b3bf6cf1d14a3f62d28e70b9b846d024f82a1e294853625e9bd150d8a51ddc5c781cffb0fef149950a221590283f58ee8a480942f95f84a
SSDEEP

6144:2pcrmjz2EUZ/+m2dq9HQUaV80yHs69ch:E2Pudq9H/s9wJ9ch

Score

N/A

Malware Config

Signatures

Files

71b4bbc1a688a45ded84bda4235e69af4e5f46128a755442c7980f2df401014c
.exe windows x86

be4bf12176c26f0005c467e21f611013

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PostQueuedCompletionStatus
GetModuleHandleA
GetLocaleInfoA
GetCommandLineA
SetEnvironmentVariableA
CompareStringW
CompareStringA
RaiseException
SetConsoleCursor
GetPriorityClass
GetStartupInfoA
GetVersion
ExitProcess
GetCPInfo
HeapFree
HeapAlloc
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetLastError
GetFileAttributesA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
ReadFile
GetACP
GetOEMCP
LoadLibraryA
GetLocaleInfoW
FlushFileBuffers
SetFilePointer
SetStdHandle

user32

GetDC
LoadIconW
GetWindowLongW

gdi32

CreatePalette
DescribePixelFormat

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

be4bf12176c26f0005c467e21f611013

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 6KB - Virtual size: 247KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 6KB - Virtual size: 247KB