d211f60fd158e53153f6b40d7189439633e8a34563c3aab867de0022a86fc371

General

Target

d211f60fd158e53153f6b40d7189439633e8a34563c3aab867de0022a86fc371
Size

102KB
MD5

860246b3f40864a426464cf06e9e5db8
SHA1

69ddc24a18bd8c2c92e1b241b50892b42f2b73aa
SHA256

d211f60fd158e53153f6b40d7189439633e8a34563c3aab867de0022a86fc371
SHA512

832ab4cfaaa91f7486ad2d686226df7c207fc9866e2cbe826e9715bb5d48f3ab70bf0d3bdf5390f5c05deda3b97bea0f0c48a76224758731ad45848a5ebad8e2
SSDEEP

1536:2kLnIZpAB/TaX7TWP2n5LgPaBeov0humayNibg5cHFcReEdccuVef:oABETWEFBrMd

Score

N/A

Malware Config

Signatures

Files

d211f60fd158e53153f6b40d7189439633e8a34563c3aab867de0022a86fc371
.exe windows x86

faab05a9602be8faa7f466d436223bb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleCreateLinkToFileEx
CoRevertToSelf
OleNoteObjectVisible
OleBuildVersion
StgGetIFillLockBytesOnILockBytes
OleCreate
OleDraw

kernel32

WriteFile
CreateFileW
SetStdHandle
WriteConsoleW
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
GetLastError
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

faab05a9602be8faa7f466d436223bb5

Headers

DLL Characteristics

File Characteristics

Imports

ole32

kernel32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 14KB

.rsrc Size: 43KB - Virtual size: 116KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 14KB

.rsrc
Size: 43KB - Virtual size: 116KB