f80628d3ccc7c58d8d9b74fb0597c5b7d3169218e63fd5b6f2279b736a8b5514

General

Target

f80628d3ccc7c58d8d9b74fb0597c5b7d3169218e63fd5b6f2279b736a8b5514
Size

100KB
MD5

0be5ec23ea334bd775077c5c5348f76d
SHA1

6c14b0e366842da5978533dedf28bb7eb94eafe3
SHA256

f80628d3ccc7c58d8d9b74fb0597c5b7d3169218e63fd5b6f2279b736a8b5514
SHA512

18dfbe9b38bd8e40eaea4e41be7410815dd95d3bd57bd3e0bf9fb6d19fb986538187965f763c69927fe775af57018e2d2e58a3dbe102cc2b5833884dbb5ae21f
SSDEEP

1536:qfTAmWrHPBL4LjI/8jkLitMtqnC7KqkSZZZ3gNxibLDQS:q8mz2tqnSUURbLF

Score

N/A

Malware Config

Signatures

Files

f80628d3ccc7c58d8d9b74fb0597c5b7d3169218e63fd5b6f2279b736a8b5514
.exe windows x86

ec0c4166b3077f7a668c0a50c76cba2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
CreateThread
WaitForSingleObject
GetCommandLineA
GetProcAddress
GetLastError
HeapFree
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
CloseHandle
FlushFileBuffers

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec0c4166b3077f7a668c0a50c76cba2e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 28KB - Virtual size: 24KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 28KB - Virtual size: 24KB

.reloc
Size: 8KB - Virtual size: 5KB