9298b6f26a2194ecb99e689d623658f5d96a6d060895b199f167a3df90dfeebc

General

Target

9298b6f26a2194ecb99e689d623658f5d96a6d060895b199f167a3df90dfeebc
Size

114KB
MD5

b644e1ccdbc234b5c1e41888031789ef
SHA1

cad8958b870507b65f04d2f9a0878d6545979678
SHA256

9298b6f26a2194ecb99e689d623658f5d96a6d060895b199f167a3df90dfeebc
SHA512

c29bf66278e681791865a3d2798bd4177d9bb8ba391def57639aa203f5bf9b3b759407e6ad1bda52d606c5873f874e4fb3c788ba6de2829dc2a69e299c9a4e1f
SSDEEP

1536:NaS2y7GCo6sozAH7mebtP2BRHZAQAcDyw5RKLLl4xjTHPOsLkkfffrCy:AStzora9WAZ7AcDP5FxjTvpk6

Score

N/A

Malware Config

Signatures

Files

9298b6f26a2194ecb99e689d623658f5d96a6d060895b199f167a3df90dfeebc
.exe windows x86

5a86c95c2be7df6e234f131fd09277e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripPathA

user32

wsprintfA

kernel32

GetCPInfo
FreeLibrary
LocalFree
UnmapViewOfFile
CloseHandle
WriteFile
GetTempPathA
MapViewOfFile
CreateFileMappingA
GetLastError
GetFileSize
CreateFileA
GetModuleFileNameA
LocalAlloc
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetConsoleTextAttribute
GetStdHandle
GetModuleHandleW
Sleep
ExitProcess
HeapAlloc
GetCommandLineA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
RtlUnwind
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a86c95c2be7df6e234f131fd09277e9

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

user32

kernel32

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 10KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 10KB