58f798ab39cecedd0c3cb6eed499761dae6366c6f3a6e58290cab5e238b97778

General

Target

58f798ab39cecedd0c3cb6eed499761dae6366c6f3a6e58290cab5e238b97778
Size

94KB
MD5

15c71fba16d2653caf65397358562dc0
SHA1

8844d7b4b9d7623705c2a3c9820da96d5d4823a4
SHA256

58f798ab39cecedd0c3cb6eed499761dae6366c6f3a6e58290cab5e238b97778
SHA512

a7c0f1b050ba8bf858dc73a6bcf3240bc2cfb130eaa2aa6c42bb6424889060cd94d8e7ba0d74df90c9b1c43c8b10e83d81d06ea271a546de33d0c14e851bb982
SSDEEP

1536:66zUA50lvnKF6P5DsergoP2Z9d5EqrxJy:6zlQWDvc5lr+

Score

N/A

Malware Config

Signatures

Files

58f798ab39cecedd0c3cb6eed499761dae6366c6f3a6e58290cab5e238b97778
.exe windows x86

6d0afdec3ec75495db9e2601b6ba0a2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

MkParseDisplayNameEx
RevokeFormatEnumerator
URLOpenBlockingStreamW
SetSoftwareUpdateAdvertisementState

kernel32

TlsSetValue
MoveFileWithProgressA
SwitchToThread
FindFirstVolumeMountPointW
SetHandleInformation
EnumTimeFormatsA
FoldStringW
GetProcessIoCounters
SetLocaleInfoW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
Sleep
WriteConsoleW
MultiByteToWideChar
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringW
SetEnvironmentVariableA
LoadLibraryW
HeapAlloc
HeapReAlloc
CreateFileW
CloseHandle
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
HeapSize

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6d0afdec3ec75495db9e2601b6ba0a2b

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

kernel32

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 41KB - Virtual size: 108KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 41KB - Virtual size: 108KB