b758bf51a97c6351a0dff5fa809fdfacda212eda099067299941f25cef039c04

General

Target

b758bf51a97c6351a0dff5fa809fdfacda212eda099067299941f25cef039c04
Size

49KB
MD5

2348350bfd242fb5cb440fcd072f6c29
SHA1

3bb58d9a77d8ea5e53e0c7bcd715525fb83907bf
SHA256

b758bf51a97c6351a0dff5fa809fdfacda212eda099067299941f25cef039c04
SHA512

15c047a120e78e87cfef6e524ca6b96dcad3d2dbbfe39968499301eef1be58681328b236031b2bd85f9e9cb823bd356831fbbea898a9be3891f5e2d909415bf1
SSDEEP

768:MzkpAhLOFaNZy1p6Y8+6aShwiIUzXIF9tFan23EDHCwTGI727:pih0GZy1pl8+6LFzXA3FUhGIS

Score

N/A

Malware Config

Signatures

Files

b758bf51a97c6351a0dff5fa809fdfacda212eda099067299941f25cef039c04
.exe windows x86

74eb04ea6eb0691424bf63999c73aa8c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetThreadContext
SetThreadContext
CreateProcessA
GetStartupInfoA
GetProcAddress
VirtualAllocEx
GetModuleFileNameA
GetModuleHandleA
IsDebuggerPresent
WriteProcessMemory
ResumeThread
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapFree
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
CloseHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
Sleep
HeapSize
LoadLibraryW
SetStdHandle
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapReAlloc
WriteConsoleW
CreateFileW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74eb04ea6eb0691424bf63999c73aa8c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 4KB