fb20d8c51a6b8aeabb76af3edf7135b1f8e1a6bf773b125fc3bd198335f2c89f

Sharing

Copy URL

Twitter E-mail

General

Target

fb20d8c51a6b8aeabb76af3edf7135b1f8e1a6bf773b125fc3bd198335f2c89f
Size

90KB
MD5

6012cd2cd53b7146d98d7dc9a35a915c
SHA1

483be2dbaffcb1d5bc64b17f5befb7697eac42d8
SHA256

fb20d8c51a6b8aeabb76af3edf7135b1f8e1a6bf773b125fc3bd198335f2c89f
SHA512

20b1089ff481374d70d1eaf9a75a9bf46099e0ad3f9c3bb6f2c4df58cea8bcc83c19363a73c82d4a4bad2db3870e99212d35c888a9cf6627666ffa5b654abe88
SSDEEP

1536:RcgKj/QfjpUK+OtwQR5LY8eRH2ZyqmTS/0ekBdHHJ2ML5BDYcfbU:REAr+OtwQRJyH2IbG+dJ2GThbU

Score

N/A

Malware Config

Signatures

Files

fb20d8c51a6b8aeabb76af3edf7135b1f8e1a6bf773b125fc3bd198335f2c89f
.exe windows x86

caad8708d90a28b407af38e95cae78a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTokenInformation

clusapi

ClusterNetworkEnum
ClusterNodeOpenEnum
GetClusterGroupKey
OfflineClusterResource
ClusterResourceCloseEnum
GetClusterFromNetwork
ClusterRegGetKeySecurity

kernel32

GetLastError
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ReadConsoleW
SetConsoleMode
GetConsoleMode
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapCreate
HeapAlloc
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
CreateFileW
CloseHandle
RtlUnwind
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
HeapSize

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

caad8708d90a28b407af38e95cae78a4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

clusapi

kernel32

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 4.8MB

.rsrc Size: 38KB - Virtual size: 38KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 4.8MB

.rsrc
Size: 38KB - Virtual size: 38KB

.reloc
Size: 15KB - Virtual size: 14KB