a039c5d4ad260d015137c17f186275037bd4f048ab23c48081d253f2bd2b1e53

General

Target

a039c5d4ad260d015137c17f186275037bd4f048ab23c48081d253f2bd2b1e53
Size

202KB
MD5

bc875dd24df3e5217d9f6e97aec4c470
SHA1

4741a63d0f668421fcb6873a49e40de5fd1e6e06
SHA256

a039c5d4ad260d015137c17f186275037bd4f048ab23c48081d253f2bd2b1e53
SHA512

d3bf8b41a183cfcb74dba760fe7b91bf393fcc5f179ac6a5bf5dfd601b5e894e16f02e69ac4338d7b55111b0d4c4dc1f01a87e4cd25583d70cf7eecb44aa7765
SSDEEP

3072:dg8IwB+2S0D80lCkwoxF/U+ywjsuGX80x5yvk0/yZFlO8:dmwB+2580lYoxF/YPuGs0x5okz

Score

N/A

Malware Config

Signatures

Files

a039c5d4ad260d015137c17f186275037bd4f048ab23c48081d253f2bd2b1e53
.exe windows x86

798d4cbce1276cba931f54a236e4cce7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxIndirectW
GetMessagePos
SetSysColors
TranslateMessage
GetDC
SendMessageA

kernel32

GetFileType
SetStdHandle
HeapSize
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetLastError
HeapFree
CreateFileW
CloseHandle
HeapAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
WriteConsoleW
MultiByteToWideChar
LoadLibraryW
HeapReAlloc
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetFilePointer
IsProcessorFeaturePresent

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

798d4cbce1276cba931f54a236e4cce7

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 6KB - Virtual size: 111KB

.rsrc Size: 149KB - Virtual size: 148KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 6KB - Virtual size: 111KB

.rsrc
Size: 149KB - Virtual size: 148KB

.reloc
Size: 5KB - Virtual size: 4KB