89f5aa55b9a616a45648035c757fed46b6ff4ee2481598268e2a3ab45a37eb7b

General

Target

89f5aa55b9a616a45648035c757fed46b6ff4ee2481598268e2a3ab45a37eb7b
Size

608KB
MD5

68b9d230d090d2c030205dc99ba4061b
SHA1

bde387916aa649baffcd4dd376dddd4b52aaf205
SHA256

89f5aa55b9a616a45648035c757fed46b6ff4ee2481598268e2a3ab45a37eb7b
SHA512

7aae173102c12a63570c12fca31f20686d1b4e7823f740cc139cb0f98cf1a65524df62623dae704efa8dcb64124a15b1a7d3eb367a5e7fd345f144c573e90b34
SSDEEP

6144:ir3Z53IEbalOX5ZyEWwRnJNGn84AgI8rlzM2YsCkbZRiY1Vapzlb91mzwjD6:i5iO/51a8VgIwzM2jCkbzP1wPGzw

Score

N/A

Malware Config

Signatures

Files

89f5aa55b9a616a45648035c757fed46b6ff4ee2481598268e2a3ab45a37eb7b
.exe windows x86

6100e587f31159ed7c100ad2fa4f6c1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
TranslateMessage
PeekMessageA
ShowWindow
LoadImageA

kernel32

TlsGetValue
WriteConsoleW
GetConsoleOutputCP
SetEvent
GetTickCount
VirtualFreeEx
Sleep
GetEnvironmentVariableA
GetLastError
GetProcAddress
VirtualAlloc
VirtualAllocEx
GetLocalTime
LoadLibraryA
CloseHandle
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwind
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
CreateFileA
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetFilePointer
SetEndOfFile
GetProcessHeap
MultiByteToWideChar
ReadFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6100e587f31159ed7c100ad2fa4f6c1c

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 305KB - Virtual size: 305KB

.data Size: 5KB - Virtual size: 628KB

.rsrc Size: 242KB - Virtual size: 241KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 305KB - Virtual size: 305KB

.data
Size: 5KB - Virtual size: 628KB

.rsrc
Size: 242KB - Virtual size: 241KB