c636db0d3b23e35aa397e73159ca2ec885e60b9fbd9c9ffd96e0d06c79b5c415

Sharing

Copy URL

Twitter E-mail

General

Target

c636db0d3b23e35aa397e73159ca2ec885e60b9fbd9c9ffd96e0d06c79b5c415
Size

179KB
MD5

46aaf45bd4a4565be0090a3c5b99eb89
SHA1

b18c12a31da39f6e27fa67d97cd293d65690078f
SHA256

c636db0d3b23e35aa397e73159ca2ec885e60b9fbd9c9ffd96e0d06c79b5c415
SHA512

82fddad9b40e5fb144cede3a49b46891b4ed4d32a85575dcef5052201348fedf62a90030a2dac8b49df75bda5229907f27138096e27efc1fad8f893303bad645
SSDEEP

3072:oeU0WY+eAE82UQckMd16cBD8kk9EnMTkTiuVjshE7r/QpNOTggvPR26HOMo8:otO+pQNGakWRE7LyeOk

Score

N/A

Malware Config

Signatures

Files

c636db0d3b23e35aa397e73159ca2ec885e60b9fbd9c9ffd96e0d06c79b5c415
.exe windows x86

02504ff2e5eaf8a2d1950646f8142024

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesA
GetModuleHandleA
GetLocaleInfoA
LoadLibraryA
GetProcAddress
LCMapStringA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
RaiseException
SetFilePointer
GetLastError
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
WideCharToMultiByte
LCMapStringW

user32

IsCharAlphaW
GetMenu
PostQuitMessage
IntersectRect
GetAltTabInfoW
DdeGetData
DdeCreateStringHandleA
EnumPropsExA
GetDCEx
PaintDesktop
EnumChildWindows
LookupIconIdFromDirectoryEx
TranslateAcceleratorA
GetKeyboardState
DrawEdge
LoadStringW
GetMenuStringW
GetUserObjectInformationA
PeekMessageW
ChangeMenuA
OemToCharBuffW
MessageBoxIndirectW
CreateIconFromResource
RegisterClassExW
SendIMEMessageExA
DefMDIChildProcW
InvalidateRect
GetScrollBarInfo
CloseWindowStation
MessageBoxExA
GetSysColorBrush

oleaut32

VarFormat
LPSAFEARRAY_UserSize
VarDecAdd
VarAnd
QueryPathOfRegTypeLi
SetErrorInfo
SafeArrayDestroyDescriptor
BstrFromVector
VarEqv
VarAdd
SysStringByteLen
LPSAFEARRAY_UserFree
VarCat
VarBstrFromDec

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02504ff2e5eaf8a2d1950646f8142024

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

Sections

.text Size: 170KB - Virtual size: 169KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 239KB

.rsrc Size: 512B - Virtual size: 464B

.text
Size: 170KB - Virtual size: 169KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 239KB

.rsrc
Size: 512B - Virtual size: 464B