528505172ca7f0bfc07887e5d671a74427f57c3a91f4f4afd3108389680e4295

General

Target

528505172ca7f0bfc07887e5d671a74427f57c3a91f4f4afd3108389680e4295
Size

43KB
MD5

c9938a730d60a8854bb0291336ceb2d3
SHA1

979bb848a6a88d9dff899b72fcc11d3c3fe93cd2
SHA256

528505172ca7f0bfc07887e5d671a74427f57c3a91f4f4afd3108389680e4295
SHA512

8cc427f2e0758a7959beda17216b810b4dbe19422b32399b575d93cd7511c4780536f9a847e66296f812d7fde44093bfac4cd174c2b4028dad1c075afe012b52
SSDEEP

384:6tfdvxhnAalT48HuV2lywLFi9RBWiDlmtBjmmsTRun1QhqTcWR6t7yjmmsmRuHfs:SfRnn48I2yroipmOYncWUDpHfFDRW7

Score

N/A

Malware Config

Signatures

Files

528505172ca7f0bfc07887e5d671a74427f57c3a91f4f4afd3108389680e4295
.exe windows x86

af9ac8d433564bae43df3d6ba89376be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQueryEx
ReadProcessMemory
TerminateProcess
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
CreateEventA
CreateThread
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr100

__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_crt_debugger_hook
memset
memcpy

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af9ac8d433564bae43df3d6ba89376be

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr100

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 512B - Virtual size: 502B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 512B - Virtual size: 502B