e809eee35c6a11b5f0cdb2a7be2c4ca7b4e2d45823b556a2342b00ae82070968

General

Target

e809eee35c6a11b5f0cdb2a7be2c4ca7b4e2d45823b556a2342b00ae82070968
Size

89KB
MD5

e3dfb062de17d3e1fb9883e8b1c9a9b7
SHA1

97b2c256ed95a07cc615f39f9df21163cdeb49ea
SHA256

e809eee35c6a11b5f0cdb2a7be2c4ca7b4e2d45823b556a2342b00ae82070968
SHA512

742b7d96331d81072a2e9bc3e107fad501e26a5c71b824d21fd297c3ed1e94857bcf1aa4c08dcbe50b4d6bb7ebfd91814995ae90741d749a8016d4299542a9c9
SSDEEP

768:/+SbexXifml/+g/7E3cthMEnfX2lKckexxU6EDhVnDi7x8nZKkyhbKRMWIG+Codh:PbE/+eVnf2DkNRtZ5RMWnod8mttr

Score

N/A

Malware Config

Signatures

Files

e809eee35c6a11b5f0cdb2a7be2c4ca7b4e2d45823b556a2342b00ae82070968
.exe windows x86

718739f7dea93887833a5cb192807294

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
VirtualAlloc
SetFilePointer
GetFileSize
CreateFileA
GetModuleFileNameA
GetModuleHandleA
Sleep
GetProcAddress
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
RtlUnwind
GetLastError
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc

comdlg32

GetOpenFileNameA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

718739f7dea93887833a5cb192807294

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comdlg32

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 13KB - Virtual size: 13KB