8156b14c9dad449f39198f57ad09960690fd5edc05e94eb86a7eb92f4313ab25

General

Target

8156b14c9dad449f39198f57ad09960690fd5edc05e94eb86a7eb92f4313ab25
Size

66KB
MD5

7482ed6c5f0c5dde4c09973c483b9e90
SHA1

5a51315f0bf6585e7e32053eb683bd46672510cc
SHA256

8156b14c9dad449f39198f57ad09960690fd5edc05e94eb86a7eb92f4313ab25
SHA512

2bb930cf07ffce99ad841688aae54ea465edc157df2ad0a8953349ed2f952b7a8bab078300a8b827b5ffa61d87a0f61f67e9393bb83bb608f26969098e09a491
SSDEEP

1536:i6NnFu0hDSbw9uO9NDBwWZJAtlJL0p4k:THDSbO9Nj+tw

Score

N/A

Malware Config

Signatures

Files

8156b14c9dad449f39198f57ad09960690fd5edc05e94eb86a7eb92f4313ab25
.exe windows x86

4d87c61aa3082b65f5df682dd498400b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

wvnsprintfA

imagehlp

CheckSumMappedFile

kernel32

GetProcAddress
GetModuleHandleA
GlobalAlloc
LoadLibraryExA
GlobalFree
FreeLibrary
CreateFileA
GetProcessHeap
HeapAlloc
DeviceIoControl
HeapFree
CloseHandle
lstrcpyA
CreatePipe
CreateProcessA
WaitForSingleObject
DeleteFileA
MoveFileExA
lstrlenA
GetTempFileNameA
CreateDirectoryA
GetFileAttributesA
CopyFileA
MoveFileA
lstrcatA
GetFileTime
SetFileTime
WriteFile
GetFileSize
SetFilePointer
lstrcmpiA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersionExA
GetTempPathA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.user1
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.user2
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.user3
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d87c61aa3082b65f5df682dd498400b

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

imagehlp

kernel32

shell32

ole32

Sections

.text Size: 1KB - Virtual size: 1KB

.user1 Size: 3KB - Virtual size: 2KB

.user2 Size: 1024B - Virtual size: 908B

.user3 Size: 1024B - Virtual size: 809B

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 512B - Virtual size: 868B

.text
Size: 1KB - Virtual size: 1KB

.user1
Size: 3KB - Virtual size: 2KB

.user2
Size: 1024B - Virtual size: 908B

.user3
Size: 1024B - Virtual size: 809B

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 512B - Virtual size: 868B