c7211bedd094d9c5dd76e2f2ff9bc9fd4f3d2fd038dbd76e94c0a4c6d27640eb

General

Target

c7211bedd094d9c5dd76e2f2ff9bc9fd4f3d2fd038dbd76e94c0a4c6d27640eb
Size

97KB
MD5

e7efcf0faae02642ab1e8f17b5f8303f
SHA1

6064f247e17e7ba554e0f32e803ed8c0e5d724a5
SHA256

c7211bedd094d9c5dd76e2f2ff9bc9fd4f3d2fd038dbd76e94c0a4c6d27640eb
SHA512

978ba664484bd31e7202624c8c51c6559651adb5a9ff838ce47c913e53fa69086602d174586cf70399ca69630431c12654449537cec816a98c5688592a2f3eaf
SSDEEP

1536:idOlNwS0IjRJOsjyIa5dd60z+P/onzC72Q+b7xkQQ:iMTwS0IjRUsj6Y0z+3omz+b7a

Score

N/A

Malware Config

Signatures

Files

c7211bedd094d9c5dd76e2f2ff9bc9fd4f3d2fd038dbd76e94c0a4c6d27640eb
.exe windows x86

982cc47258db4464e27934c05b9e9dad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoDosDateTimeToFileTime
OleSaveToStream
StringFromGUID2
OleQueryCreateFromData
OleDuplicateData

kernel32

InterlockedDecrement
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize
LCMapStringW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

982cc47258db4464e27934c05b9e9dad

Headers

DLL Characteristics

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 8KB

.rsrc Size: 65KB - Virtual size: 64KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 65KB - Virtual size: 64KB