291ac0a3fa61db0e049f9132393c9457199388cca1ddff3f9a12b8b5a6feba26

General

Target

291ac0a3fa61db0e049f9132393c9457199388cca1ddff3f9a12b8b5a6feba26
Size

16KB
MD5

f952e8058bf8cbe23b5917ae80256611
SHA1

194a9972e7f6e1a8238adeef2d29d6dee5527805
SHA256

291ac0a3fa61db0e049f9132393c9457199388cca1ddff3f9a12b8b5a6feba26
SHA512

db501cbfe729694ccb9169aaf437af2dac7f41cc3019499440a06d2b78b65d6a72887ce9590ae4b2166644e1e09a3644c30ceaeb94cc7efed6fdcad793606ac0
SSDEEP

384:lDbzSaOC4dlTUK+43htvrpZQ1jKDGqtYFE93I/oY81vcIXNxoGw4cq:lDfSaOC43TVFRtvrHBMAnBXDF

Score

N/A

Malware Config

Signatures

Files

291ac0a3fa61db0e049f9132393c9457199388cca1ddff3f9a12b8b5a6feba26
.exe windows x64

e0946da22801e96bc8cfee677bd856db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_initterm
_onexit
__dllonexit
strlen
__wgetmainargs
??3@YAXPEAX@Z
_memicmp
wcscat
_exit
free
_wcsicmp
_wcmdln
exit
memcpy
_cexit
wcscpy
_snwprintf
memset
wcschr
_wtoi
wcsrchr
wcslen
__setusermatherr
_commode
_fmode
__set_app_type
_c_exit
_XcptFilter
malloc
__C_specific_handler

kernel32

ResumeThread
WriteProcessMemory
EnumResourceTypesW
CreateRemoteThread
OpenProcess
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
GetStartupInfoW
WaitForSingleObject
GetCurrentProcess
SetErrorMode
FreeLibrary
LoadLibraryW
GetProcAddress
FindResourceW
LoadResource
LoadLibraryExW
CloseHandle
GetWindowsDirectoryW
LockResource
SizeofResource
LocalFree
FormatMessageW
GetVersionExW
GetLastError
GetModuleHandleW
EnumResourceNamesW

user32

MessageBoxW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0946da22801e96bc8cfee677bd856db

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 432B

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 432B

.rsrc
Size: 3KB - Virtual size: 2KB