76c9edd97b8e40d8d011de3f188bd7951c76c4ff36ba06dcae6087331bb5d63f

General

Target

76c9edd97b8e40d8d011de3f188bd7951c76c4ff36ba06dcae6087331bb5d63f
Size

196KB
MD5

6b4dcf1f96e09331cd387ee75aee0322
SHA1

4a73e69e8955e8d3e4ddcc87ee205f1a3bc09de3
SHA256

76c9edd97b8e40d8d011de3f188bd7951c76c4ff36ba06dcae6087331bb5d63f
SHA512

211d3416ab7a5af9e70154e3fa8ffe92f7dd3d9f9e3c921864fb365a8123d5036dd485af9ed865d61a9602de6e18719ee1637b048d31815d04c19b252f555d7e
SSDEEP

6144:vQx686s5LDWWYB2mgUyB3KIxjMW2+NMn9r236R:vw6xs5LFYJgUyBDxjMW2QY9rA

Score

N/A

Malware Config

Signatures

Files

76c9edd97b8e40d8d011de3f188bd7951c76c4ff36ba06dcae6087331bb5d63f
.exe windows x86

6e46cd52ffbf7041138f9be6b99a1fca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommMask
FillConsoleOutputCharacterW
AllocConsole
EnumSystemLocalesA
GetCommProperties
GetWindowsDirectoryW
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetFilePointer
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetLastError
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
HeapAlloc
WriteFile
RtlUnwind
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
CloseHandle

oleaut32

VarBstrFromBool
SafeArrayRedim
VarDecDiv
LoadTypeLi

shlwapi

StrTrimA
PathIsURLA
PathIsContentTypeA
PathFileExistsW
PathRemoveBlanksA
StrCSpnIW
PathUnquoteSpacesA
StrFormatByteSizeA
PathIsDirectoryA
StrToIntA
SHCreateShellPalette
ChrCmpIA
PathGetCharTypeA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e46cd52ffbf7041138f9be6b99a1fca

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

oleaut32

shlwapi

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 123KB - Virtual size: 122KB

.data Size: 31KB - Virtual size: 380KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 123KB - Virtual size: 122KB

.data
Size: 31KB - Virtual size: 380KB

.rsrc
Size: 4KB - Virtual size: 3KB