c49f14cf604aa0794733818c8c6f49ca4d8d08ecc66efa1d6a75ffc331ab75a5

General

Target

c49f14cf604aa0794733818c8c6f49ca4d8d08ecc66efa1d6a75ffc331ab75a5
Size

77KB
MD5

53c3d032ec22b1b6e5c66506d5a5479d
SHA1

2e9db9581c62e552d979551a24f98ea400d5681c
SHA256

c49f14cf604aa0794733818c8c6f49ca4d8d08ecc66efa1d6a75ffc331ab75a5
SHA512

e7788bd3a8690e690f7a4bb0348e6b5b74b58404bc566f9aa168a225128aff106ae40230172ec16389d71f03418d06936645caf33458ea3b3bc6d4d820d53ffc
SSDEEP

1536:5i9M/SEATV63VDpwm1f5MyKIU593RsA5kVfXPXyC81U6GPEsl:5imETV6fwm1RKjswkVHO1U64Esl

Score

N/A

Malware Config

Signatures

Files

c49f14cf604aa0794733818c8c6f49ca4d8d08ecc66efa1d6a75ffc331ab75a5
.exe windows x86

22cc10cf48d2b9fcf32be3004483d837

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
lstrcatA
GetProcAddress
LoadLibraryA
LocalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
LoadLibraryW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
RtlUnwind
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
HeapAlloc
GetProcessHeap
VirtualQuery
SetFilePointer
GetConsoleCP
GetConsoleMode
Sleep
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringW
GetStringTypeW
WriteConsoleW
HeapReAlloc
SetEndOfFile
ReadFile
HeapSize
CreateFileW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hizorty
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

22cc10cf48d2b9fcf32be3004483d837

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 32KB

hizorty Size: - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 32KB

hizorty
Size: - Virtual size: 4KB