6146db47a1ca88ca6be4d3f430020b24b1eec71e2e49410edadfa8acd8a2f778

General

Target

6146db47a1ca88ca6be4d3f430020b24b1eec71e2e49410edadfa8acd8a2f778
Size

143KB
MD5

61d2802f603015909d772caabc57fbf5
SHA1

6653a16444c9e2aa70954dcb63c1303cfae68466
SHA256

6146db47a1ca88ca6be4d3f430020b24b1eec71e2e49410edadfa8acd8a2f778
SHA512

55f73780bf0ab0e018d7d44d3c7bae92b9d598e17be9d6e7e60ffc184da82c3f0c2ed2d981d9a0c8220739e7360bc8662d468ed8650e82b56182c3f84c653b8c
SSDEEP

3072:wg/n2226stH7I4QM38wRzDPAHU6+v0SlI7cRqTgeJIhAhhFurqp:wen2k4H7Ixw8wRA06+vPOcsTgNmp

Score

N/A

Malware Config

Signatures

Files

6146db47a1ca88ca6be4d3f430020b24b1eec71e2e49410edadfa8acd8a2f778
.exe windows x86

a0b03959d22e3b73b29ca356bc14f70b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenThread
SetEnvironmentVariableA
GetCommMask
TlsAlloc
lstrcpynW
GetModuleHandleA
MulDiv
EnumUILanguagesA
GetStartupInfoA
SetFileAttributesW
UnhandledExceptionFilter
EnumUILanguagesW
FindResourceW
SetConsoleOutputCP
QueryPerformanceCounter
GetCurrentProcessId

msvcrt

_ismbcpunct
_controlfp
__getmainargs
_findfirst
_wspawnv
exit
_initterm
_adjust_fdiv
__setusermatherr
__p__fmode
_isatty
_mktime64
floor
__p__commode
_XcptFilter
_except_handler3
_mbsnicoll
_acmdln
__set_app_type
_exit
strspn
_wutime64
_isctype
log

gdi32

DrawEscape
PolyPolygon
CreateScalableFontResourceA
DeleteColorSpace
GetGraphicsMode
SetBitmapDimensionEx
EnumICMProfilesW
GetRasterizerCaps
SetSystemPaletteUse
WidenPath
CombineRgn
GetCharWidthA
GetLayout

user32

CopyImage
GetTabbedTextExtentA
RegisterDeviceNotificationW
WaitMessage
InsertMenuItemA
CreateDesktopW
IsZoomed
DdeConnectList
IsChild
CopyRect

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0b03959d22e3b73b29ca356bc14f70b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

gdi32

user32

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 512B - Virtual size: 88KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 512B - Virtual size: 88KB

.rsrc
Size: 7KB - Virtual size: 7KB