a4b70176608fa703d0311f79e6a639c6383186645885fc0e2821def24663eb91

General

Target

a4b70176608fa703d0311f79e6a639c6383186645885fc0e2821def24663eb91
Size

252KB
MD5

ac442ef5b903fc6b05e7808c703f703b
SHA1

62b0a092d1c3beb393382b375d9edbdb4bc252aa
SHA256

a4b70176608fa703d0311f79e6a639c6383186645885fc0e2821def24663eb91
SHA512

344c8462300450f88f3f3464aef123b58293ba7ccfad6ceaf8ead4bf6bbf6e71b9193fc0e6083867198b58fef16ff13e9b7f3bae61d8b9810bffa9ea4b3e92d7
SSDEEP

3072:MDl+7OhK2YvAc3wixTzsYxRXS/OlBhNSZdr3tEK0qi5dNQ1H1wsj6Z4gokWoIiEU:ATqAiy4lBqbpYQ12s+S62VBE/igaC8

Score

N/A

Malware Config

Signatures

Files

a4b70176608fa703d0311f79e6a639c6383186645885fc0e2821def24663eb91
.exe windows x86

59f7ac8ecc156aca693ab973e0b273e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceA
CreateHardLinkA
TlsGetValue
VirtualAlloc
GetProcAddress
LoadLibraryA
SetLastError
GetLongPathNameW
CreateJobObjectA
BeginUpdateResourceA
SetInformationJobObject
BuildCommDCBW
TryEnterCriticalSection
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

user32

IsCharUpperA
GetWindowTextLengthW
ToAsciiEx
OemToCharW
RegisterClipboardFormatW
GetKeyboardLayoutList
DefFrameProcA
SetClassLongA
GetSysColorBrush
GetMenuItemID

shlwapi

StrStrA
PathIsPrefixW
PathQuoteSpacesA
PathRenameExtensionW
PathGetArgsW
StrFormatByteSizeA
PathCombineA
SHEnumValueW
PathGetArgsA

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59f7ac8ecc156aca693ab973e0b273e6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

Sections

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 89KB - Virtual size: 89KB

.data Size: 1KB - Virtual size: 238KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 89KB - Virtual size: 89KB

.data
Size: 1KB - Virtual size: 238KB

.rsrc
Size: 1KB - Virtual size: 1KB