b85acf762e512e0c21892e8b670ff879c20998e41c234aee2338c9151d98b1f6

General

Target

b85acf762e512e0c21892e8b670ff879c20998e41c234aee2338c9151d98b1f6
Size

67KB
MD5

32dc4b7f111d5def17a47f96a766a743
SHA1

f3145365ef0fd76672f4a6ee41cb592ddc0ff2da
SHA256

b85acf762e512e0c21892e8b670ff879c20998e41c234aee2338c9151d98b1f6
SHA512

7858d23aa640ad6ea1c87f3c6fa0d9bb0e3c47b9ee9b0413262ec7b4c3f98362fa936f537daf594e8538d9c1dd755485d9a53e64f0d1693241f4301149ed2f0d
SSDEEP

1536:ufkFOBY9KsDAKlrSruL9lVLq0nIPJP41RLoH0rV:lsuKsRhRpDTIWnLyG

Score

N/A

Malware Config

Signatures

Files

b85acf762e512e0c21892e8b670ff879c20998e41c234aee2338c9151d98b1f6
.exe windows x86

6d739eae8cbfffabef141c2dc11f4acc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
CreateProcessA
TerminateProcess
OpenProcess
CreateRemoteThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
FreeLibrary
LoadLibraryA
GetVersionExA
GetExitCodeThread
WaitForSingleObject
SetEnvironmentVariableA
EnterCriticalSection
LeaveCriticalSection
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
GetCommandLineA
HeapSetInformation
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
DecodePointer
SetHandleCount
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetCurrentProcess
Sleep
HeapFree
GetModuleHandleW
ExitProcess
IsProcessorFeaturePresent
LoadLibraryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
MultiByteToWideChar
SetFilePointer
SetStdHandle
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
CreateFileW
GetStringTypeW
LCMapStringW
HeapSize
ReadConsoleInputA
SetConsoleMode

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d739eae8cbfffabef141c2dc11f4acc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 6KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 6KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB