f995b859699c6dd6db1146a5baef919ef5c52a139293f1e83518e037abfdd713

General

Target

f995b859699c6dd6db1146a5baef919ef5c52a139293f1e83518e037abfdd713
Size

90KB
MD5

0e5367bb8372f1ba60a1b76064ad7827
SHA1

7b849f487b72ef17b983fe79809adb5382a04146
SHA256

f995b859699c6dd6db1146a5baef919ef5c52a139293f1e83518e037abfdd713
SHA512

f0d9d098cd0d360e63573f072dd1956924990405a00dd37becebea105936cf6310af294694a62b837e627ddf466f29da23fa562c4dc2bb75c7ee86711de8dd08
SSDEEP

1536:vDLOD7Gw1n5F6PJCy05h4TkoCm6cshr1D:rQGAYCywhqQtcshrx

Score

N/A

Malware Config

Signatures

Files

f995b859699c6dd6db1146a5baef919ef5c52a139293f1e83518e037abfdd713
.exe windows x86

c55bf8ace4f0cbef71ad8b2a5bf0afa7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

OleUIPasteSpecialW
OleUIConvertW
ord5

kernel32

TlsSetValue
IsValidLocale
WriteConsoleA
HeapValidate
GetPrivateProfileSectionNamesW
GetVolumeInformationW
SearchPathW
GetPrivateProfileStructA
EraseTape
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
Sleep
WriteConsoleW
MultiByteToWideChar
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringW
SetEnvironmentVariableA
LoadLibraryW
HeapAlloc
HeapReAlloc
CreateFileW
CloseHandle
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
HeapSize

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c55bf8ace4f0cbef71ad8b2a5bf0afa7

Headers

DLL Characteristics

File Characteristics

Imports

oledlg

kernel32

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 37KB - Virtual size: 112KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 37KB - Virtual size: 112KB