33380920f5ab8b0db68e5fa74c33a767ec10fcaa3fb876eed4f78090af462c15

General

Target

33380920f5ab8b0db68e5fa74c33a767ec10fcaa3fb876eed4f78090af462c15
Size

61KB
MD5

9f44e69dd18f5abfd5ee2c32bb944bee
SHA1

65e16442ad45d5b51d6ae693c373cd6ca5489a09
SHA256

33380920f5ab8b0db68e5fa74c33a767ec10fcaa3fb876eed4f78090af462c15
SHA512

001218f2bb344b54b32fc2cbd9786a71cf09e1ce70a370e445152223e473103de1e4c11bb1edd11f5b10ee8ff820a59d1b5110eb1a6ddc6449f9f97f4e42cc09
SSDEEP

768:fKNefPi0QkCV1f1p0RY0XxuyLJHPcC0MGOhyk17KIPg2SK+6thFmsWu1P4RF:foei0QlYAyLJPcBMGOhL1E2rF5yRF

Score

N/A

Malware Config

Signatures

Files

33380920f5ab8b0db68e5fa74c33a767ec10fcaa3fb876eed4f78090af462c15
.exe windows x86

cba3d560ce2ab33df67d2f7741d02c1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

kernel32

InterlockedIncrement
CloseHandle
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcess
GetEnvironmentVariableW
FreeLibrary
WaitForSingleObject
CreateRemoteThread
GetProcAddress
LoadLibraryW
GetModuleFileNameW
GetLastError
VirtualFreeEx
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
GetStartupInfoW
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cba3d560ce2ab33df67d2f7741d02c1d

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 3KB - Virtual size: 6KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 3KB - Virtual size: 6KB