cea58ecd1e65195217fa582c8d367d091ca5c87dd4ec0a6daf3caf214074c3ae

General

Target

cea58ecd1e65195217fa582c8d367d091ca5c87dd4ec0a6daf3caf214074c3ae
Size

331KB
MD5

cd712b3bf4f352ba1f0c7e28ac64c06c
SHA1

93847c73280b318db65bf4df1b835ec44b0b1feb
SHA256

cea58ecd1e65195217fa582c8d367d091ca5c87dd4ec0a6daf3caf214074c3ae
SHA512

54c416e9b49b3234800e12d7642f58e9e4c406e8277a6f3a688e13d5ad305268403afe6487c2e00720de7f1af49dabf88ae501f34c75ca3f6e1e7cd7034caeef
SSDEEP

6144:OlrRyEr/pb+hG7wMJ+nh8fP9NWUFgrJmpgj0hXayB9//CWN4kk7+Lp0F93SyYH:OhRfr0hQH+q31gj0bn/hC7+KFQ7H

Score

N/A

Malware Config

Signatures

Files

cea58ecd1e65195217fa582c8d367d091ca5c87dd4ec0a6daf3caf214074c3ae
.exe windows x86

2ad4a86526a3bc3b582521fb6f3a237e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedIncrement
GetProcessHeap
InterlockedExchange
GetSystemTimeAsFileTime
InterlockedDecrement
GetStartupInfoA
GetThreadLocale
GetCurrentProcess
GetLastError
GetTickCount
lstrlenA

ulib

?Initialize@PATH@@QAEEPBV1@E@Z
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ
?Initialize@FSN_FILTER@@QAEEXZ
??1PROGRAM@@UAE@XZ

ntdll

RtlTimeToTimeFields
NtQueryInformationProcess
NtOpenFile
wcsncmp
NtAdjustPrivilegesToken
qsort
NtOpenSymbolicLinkObject
RtlSetGroupSecurityDescriptor
RtlAnsiStringToUnicodeString
RtlUnicodeToOemN
NtFsControlFile
RtlCreateSecurityDescriptor

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ad4a86526a3bc3b582521fb6f3a237e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ulib

ntdll

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 19KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 19KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 2KB - Virtual size: 1KB