6680350f9c88e878bb85c778fdff4ca2db237f93cb714a797b38ed55ff81366f

General

Target

6680350f9c88e878bb85c778fdff4ca2db237f93cb714a797b38ed55ff81366f
Size

142KB
MD5

027d77b772646885495ee6bc9ce9fd05
SHA1

88a68a005a8b65539c5c06dea542d89a57705440
SHA256

6680350f9c88e878bb85c778fdff4ca2db237f93cb714a797b38ed55ff81366f
SHA512

6d162325a28e8a7f376978d078fe8893e6e4529d1412848a3e714b28a8777b1241518b041efb65dfaddb9140b70eec1c9007a9b2c713a5aef21e4dab9c2a9b57
SSDEEP

3072:FQKn0kJJ3aLjNR348Pb5E8MaIAmz0YQnxzGSAcb:FQK0qJ3uD48TIeFxzGSb

Score

N/A

Malware Config

Signatures

Files

6680350f9c88e878bb85c778fdff4ca2db237f93cb714a797b38ed55ff81366f
.exe windows x86

87d01019e08f83cf37cd0fea17afee16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
ReadFile
SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
GetCurrentProcessId
ExitProcess
HeapAlloc
CloseHandle
HeapFree
ExitThread
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcessHeap
GetProcAddress
GetStringTypeW
MultiByteToWideChar
GetModuleHandleW
Sleep
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
HeapReAlloc
GetStringTypeA

comdlg32

GetOpenFileNameA

advapi32

OpenBackupEventLogA

shlwapi

wnsprintfA

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87d01019e08f83cf37cd0fea17afee16

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

advapi32

shlwapi

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 10KB - Virtual size: 9KB