b559ed256acd41f05acb11e6367f469565838cf9345f7fd54ce7aad2b39be511

General

Target

b559ed256acd41f05acb11e6367f469565838cf9345f7fd54ce7aad2b39be511
Size

490KB
MD5

eff848a72ef374f8658027bd9499e601
SHA1

dc12e3d4ef0bf46bbe57c477fdc1610dd908c6a4
SHA256

b559ed256acd41f05acb11e6367f469565838cf9345f7fd54ce7aad2b39be511
SHA512

74e839f6a172098509a17b275048203086a6454067e245a4a2cfe9b0b44d7d894b9811ded03c8a2aa6f59651eb0fa9f33eecda5105fc47ac07a5ae1788ea0313
SSDEEP

768:M7HQP9p7fndSX+nwMkIQJulXj49q3uekslyCLNvysHqmvjAEV:M+9pzndu+wtJulXs96IGHVbZ

Score

N/A

Malware Config

Signatures

Files

b559ed256acd41f05acb11e6367f469565838cf9345f7fd54ce7aad2b39be511
.exe windows x86

c7bb5f2f88dc3079369439ede4351076

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
fclose
fseek
ftell
fread
fopen
malloc
memmove
??2@YAPAXI@Z
memset
??3@YAXPAX@Z

psapi

GetModuleFileNameExA

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetModuleHandleA
VirtualProtect
LoadLibraryA
VirtualAlloc
GetProcAddress
IsBadReadPtr
CreateThread
WriteProcessMemory
LockResource
VirtualProtectEx
SetLastError
GetLastError
FindResourceExA
WaitForSingleObject
GetCurrentProcess
LoadResource
FindResourceA
ExitProcess
IsDebuggerPresent

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7bb5f2f88dc3079369439ede4351076

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

psapi

kernel32

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 1024B - Virtual size: 524B

.bss Size: - Virtual size: 60KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 1024B - Virtual size: 524B

.bss
Size: - Virtual size: 60KB