ccea06ce552a08723bc4dc5b7c7ee2293cb167ebaf3c1bcbe6374e57b76e2967

General

Target

ccea06ce552a08723bc4dc5b7c7ee2293cb167ebaf3c1bcbe6374e57b76e2967
Size

160KB
MD5

773662ddf0a4d0c8ff66e853f7a414f4
SHA1

2881d118abfd6c0242f45701f654df6dae51ce5a
SHA256

ccea06ce552a08723bc4dc5b7c7ee2293cb167ebaf3c1bcbe6374e57b76e2967
SHA512

bf38515e2905f3b5e241ed2d052540d8d79b9ef9e0b89616dfe24e27fb02a3cc6fa9d5f6fa5f5d1a6984529e087bd50933308116667382548926b1736b69872b
SSDEEP

3072:kys4Ea4sR8uL3+I/UcryxhQSzmLS+5q6R+Bqh7r0Qd5U3yG9rgPmSNSXPE9Dkao:0Ay437rASiLUay0QoicseJP6k

Score

N/A

Malware Config

Signatures

Files

ccea06ce552a08723bc4dc5b7c7ee2293cb167ebaf3c1bcbe6374e57b76e2967
.exe windows x86

c105ff1b103193bf95fd75cf68ebfde9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfoExA
WriteConsoleA
LoadLibraryExW
Module32NextW
LocalSize
FindNextVolumeW
VirtualLock
GetDriveTypeW
LocalFlags
SetFilePointer
FormatMessageA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetLastError
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapAlloc
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
FlushFileBuffers
CloseHandle

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c105ff1b103193bf95fd75cf68ebfde9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 130KB - Virtual size: 130KB

.data Size: 2KB - Virtual size: 235KB

.rsrc Size: 1024B - Virtual size: 544B

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 130KB - Virtual size: 130KB

.data
Size: 2KB - Virtual size: 235KB

.rsrc
Size: 1024B - Virtual size: 544B