9d4aa2d78d5142fd7abb2a3215b321f360b4f89f0fac25eada0dee23367dbd44

General

Target

9d4aa2d78d5142fd7abb2a3215b321f360b4f89f0fac25eada0dee23367dbd44
Size

252KB
MD5

3abf1c082a1eae1c9e3c84acc1edc930
SHA1

eddee692469cc7e37aaf5ace7883d400ae7cfe23
SHA256

9d4aa2d78d5142fd7abb2a3215b321f360b4f89f0fac25eada0dee23367dbd44
SHA512

e08e8b6757921208b53cfa7054e1d32f7d005efce8c2ad9c9c36a4723ef767ee6d40262f60394aa3aa23a331e29de97ef59028e1e3ff57625375a22d41fe46c4
SSDEEP

3072:MDl+7OhK2YvAc3wixTzsYxRXS/OlBhNSZdr3tEK0qi5dNQ1H1wsj6Z4gokWwiEFK:ATqAiy4lBqbpYQ12s+SoVBE/igaC8

Score

N/A

Malware Config

Signatures

Files

9d4aa2d78d5142fd7abb2a3215b321f360b4f89f0fac25eada0dee23367dbd44
.exe windows x86

59f7ac8ecc156aca693ab973e0b273e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceA
CreateHardLinkA
TlsGetValue
VirtualAlloc
GetProcAddress
LoadLibraryA
SetLastError
GetLongPathNameW
CreateJobObjectA
BeginUpdateResourceA
SetInformationJobObject
BuildCommDCBW
TryEnterCriticalSection
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

user32

IsCharUpperA
GetWindowTextLengthW
ToAsciiEx
OemToCharW
RegisterClipboardFormatW
GetKeyboardLayoutList
DefFrameProcA
SetClassLongA
GetSysColorBrush
GetMenuItemID

shlwapi

StrStrA
PathIsPrefixW
PathQuoteSpacesA
PathRenameExtensionW
PathGetArgsW
StrFormatByteSizeA
PathCombineA
SHEnumValueW
PathGetArgsA

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59f7ac8ecc156aca693ab973e0b273e6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

Sections

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 89KB - Virtual size: 89KB

.data Size: 1KB - Virtual size: 238KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 89KB - Virtual size: 89KB

.data
Size: 1KB - Virtual size: 238KB

.rsrc
Size: 1KB - Virtual size: 1KB