99f0a976145b40d096a9914e3eafbca3a48c103e9e35153f9a36a3c60dfb9022

General

Target

99f0a976145b40d096a9914e3eafbca3a48c103e9e35153f9a36a3c60dfb9022
Size

269KB
MD5

8168067773b5c4583166d111d4318dd0
SHA1

78e087c37920458525e05f85552e9e53f7d448da
SHA256

99f0a976145b40d096a9914e3eafbca3a48c103e9e35153f9a36a3c60dfb9022
SHA512

5dfb48ce29ccc4721e4e0b15cc6840a7b3ae1f4a39c4287af031cdc8bd5939334572b30f7979c9db2842f8afd0de5bbd83a3a1e21ac13ea8973a41cc1a80e681
SSDEEP

3072:uL0ZoA45Ny59WMo2cSGFllJONYZNsbO2ropa0bpdzsGQj9F5Zvgs9YgCBBBpWIHS:OC5My5j6NaJYkyBBaIHNhJE

Score

N/A

Malware Config

Signatures

Files

99f0a976145b40d096a9914e3eafbca3a48c103e9e35153f9a36a3c60dfb9022
.exe windows x86

bd9a16babcb44819a600673acc41e7bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
ExitProcess
CreateProcessA
ReadFile
LoadLibraryA
lstrlenA
HeapFree
HeapAlloc
GetProcessHeap
GetProcAddress
CloseHandle
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
Sleep
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
HeapSize

comdlg32

GetOpenFileNameA

advapi32

OpenBackupEventLogA

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bd9a16babcb44819a600673acc41e7bc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

advapi32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 133KB - Virtual size: 132KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 133KB - Virtual size: 132KB