e178804fa7d5c9768be4edd145cb20139849101f2b864bdb950bf31171b4385d

General

Target

e178804fa7d5c9768be4edd145cb20139849101f2b864bdb950bf31171b4385d
Size

77KB
MD5

a1bccdff3237df9901d863e6cb341306
SHA1

236786d130fcc5bba18470be7cbbd71b24330260
SHA256

e178804fa7d5c9768be4edd145cb20139849101f2b864bdb950bf31171b4385d
SHA512

779d0b7d05387b5e19a8aa18b99fd8e5af8e1958213c192df60b19535566e669fdec8e01bdaf6822566d1289e4d4856d72be508aac2c035e797fb61a90b36b36
SSDEEP

1536:ui9M/SEATV63VDpwm1f5MyKIU593RsA5kVfXPXy581U6GPEsl:uimETV6fwm1RKjswkVHP1U64Esl

Score

N/A

Malware Config

Signatures

Files

e178804fa7d5c9768be4edd145cb20139849101f2b864bdb950bf31171b4385d
.exe windows x86

22cc10cf48d2b9fcf32be3004483d837

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
lstrcatA
GetProcAddress
LoadLibraryA
LocalAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
LoadLibraryW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
RtlUnwind
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
HeapAlloc
GetProcessHeap
VirtualQuery
SetFilePointer
GetConsoleCP
GetConsoleMode
Sleep
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringW
GetStringTypeW
WriteConsoleW
HeapReAlloc
SetEndOfFile
ReadFile
HeapSize
CreateFileW

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mdsptel
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

22cc10cf48d2b9fcf32be3004483d837

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 32KB

mdsptel Size: - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 32KB

mdsptel
Size: - Virtual size: 4KB