e172b0ed48a119a1bc33be4c2bc569c30f2a1da11452f65a4d07528bc549f907

General

Target

e172b0ed48a119a1bc33be4c2bc569c30f2a1da11452f65a4d07528bc549f907
Size

564KB
MD5

0f741aa175dbbfebe1cf620c893c742b
SHA1

b2bc5688e739588aee5ab4b4894bc46a1420a26c
SHA256

e172b0ed48a119a1bc33be4c2bc569c30f2a1da11452f65a4d07528bc549f907
SHA512

a925ed1d750c4c1a86aa5dae585d1dff779b3ac085107d0bd8a9e2ec4087253201e8c5fdb8ba149ce44e014f3ade2c1915ab30645a88438ad37fac3f72169a92
SSDEEP

12288:nY2VyyBGIaZ8xfCwsrGeFHcBBZSQBAT0obb:YSjaZ8xr6uhSLICb

Score

N/A

Malware Config

Signatures

Files

e172b0ed48a119a1bc33be4c2bc569c30f2a1da11452f65a4d07528bc549f907
.exe windows x86

a6f489c1359e8fe710ec22dc1b5f1364

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
WaitForSingleObject
CreateProcessA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcr90

_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
__getmainargs
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_amsg_exit
memset
strncmp
fopen
fseek
ftell
rewind
calloc
fread
fclose
fwrite
free
strlen
_adjust_fdiv
_unlink

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6f489c1359e8fe710ec22dc1b5f1364

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcr90

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 900B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1024B - Virtual size: 528B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 900B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1024B - Virtual size: 528B