b09314f06602137347e44b26a23012eb4a7d88b18ed5d21a2f83e1fbb068db25

General

Target

b09314f06602137347e44b26a23012eb4a7d88b18ed5d21a2f83e1fbb068db25
Size

55KB
MD5

f4ed17cb26ccd11ce0c0bdff74c3d0c0
SHA1

4efe115daf871823b0abefec53863ac0c5b6373b
SHA256

b09314f06602137347e44b26a23012eb4a7d88b18ed5d21a2f83e1fbb068db25
SHA512

d5d8baab29919bbd86664855209f24fd81151fb944f8546e9f0abf27cef0bb61f9f67bee78ed09e5bf8c7e4fbdbfff94b3d74d0e294d201ffdda239a705efd8a
SSDEEP

768:RUz9FYBctck06VdUdjONqW19zTLS5xIf91lPsA/9nWUYQsckutFengvQHC:RpgrZVSyUW1xGylPsAhJltFJIi

Score

N/A

Malware Config

Signatures

Files

b09314f06602137347e44b26a23012eb4a7d88b18ed5d21a2f83e1fbb068db25
.exe windows x86

a79ad4ccffdb20c032349be5d2ea0e0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
PostQuitMessage
GetPropA
TranslateMessage
SetPropA
SetWindowLongA
GetWindowLongA
IsWindow
DispatchMessageA
CallWindowProcA

msvcr90

_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
_initterm
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
exit
atol
memset
__p__commode

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetProcAddress
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a79ad4ccffdb20c032349be5d2ea0e0d

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcr90

kernel32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 47KB - Virtual size: 48KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 47KB - Virtual size: 48KB