ed3e3aa0ee214478bb7528eb64ec0bd0a9d191a85d7bde76a50fc0260d51d724

General

Target

ed3e3aa0ee214478bb7528eb64ec0bd0a9d191a85d7bde76a50fc0260d51d724
Size

88KB
MD5

e5c8526cc27aaa10d36dd1b7330e23c8
SHA1

22afefedeedf646ecae2bb7e08133b80b5e7353d
SHA256

ed3e3aa0ee214478bb7528eb64ec0bd0a9d191a85d7bde76a50fc0260d51d724
SHA512

79a12a5634795d306e4377bed212fc72e8bc6ba348e124d7a393f7249665e347e392707f1b6640426341abad2bc9b07189b70330f46094acf822c4358278f8e5
SSDEEP

1536:pC0oRi1Lhh8+J2I39BTJ8lCX7x8QfCh2B3VR44f3A:dogzh8y28TJ8lc8QaUpb44f3A

Score

N/A

Malware Config

Signatures

Files

ed3e3aa0ee214478bb7528eb64ec0bd0a9d191a85d7bde76a50fc0260d51d724
.dll windows x86

a89e906647b5d09274767f17c0d1ad1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
VirtualProtect
GetCommandLineA
GlobalFree
DisableThreadLibraryCalls
GetLastError
LocalFree
LocalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetThreadLocale
WideCharToMultiByte
GetComputerNameExW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
MultiByteToWideChar
SetLastError
lstrlenA
UnmapViewOfFile
FlushViewOfFile
GetFileSize
lstrcmpiA
SetEndOfFile
SetFilePointer

msvcr71

_except_handler3
towupper
_wcsupr
_wcsicmp
wcschr
_initterm
free
wcsspn
wcscspn
iswctype
strcspn
_wcsnicmp
_adjust_fdiv
wcscpy
wcslen
malloc
wcsncpy
_wmakepath
wcsrchr
_wsplitpath
_osver
wcscat
_fullpath
_wfullpath
_onexit
atoi
_stricmp
memmove
strncpy
__CppXcptFilter
__dllonexit

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a89e906647b5d09274767f17c0d1ad1f

Headers

File Characteristics

Imports

kernel32

msvcr71

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB