cd31fbb5f5971b7392733aec63963698b7e0de0e1ae95e3a444dc0b8134de06e

General

Target

cd31fbb5f5971b7392733aec63963698b7e0de0e1ae95e3a444dc0b8134de06e
Size

161KB
MD5

70b85f8219b88ab805c882c498686f24
SHA1

3fccfafb5d4f0a60a6482e78d945aa4823d42556
SHA256

cd31fbb5f5971b7392733aec63963698b7e0de0e1ae95e3a444dc0b8134de06e
SHA512

6394b350a3deaf286beec0a4322c99bbb5e8aac78f7b04e1405ec378e48164dd33c85f1fb945605ecfb4c1e08052da5ec50045d1010f13e1eac9221d7da53890
SSDEEP

3072:rNXywjEHQ5SufKBuLcRiqp2dOLrOUysuhfQvojz/VC3Om85bwTUBEA9:JXTxZElNONr/I+m8BwTUB

Score

N/A

Malware Config

Signatures

Files

cd31fbb5f5971b7392733aec63963698b7e0de0e1ae95e3a444dc0b8134de06e
.exe windows x86

1525136d9a3d5446e594aa23cba11e91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
ReadProcessMemory
VirtualFree
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetLogicalDriveStringsW
GetOEMCP
GetACP
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetStringTypeA

user32

DeregisterShellHookWindow
EnumPropsExW
GetPropA
GetUpdateRect
SetWindowContextHelpId
GetWindowLongW

gdi32

EndDoc

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 97KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1525136d9a3d5446e594aa23cba11e91

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 97KB - Virtual size: 98KB

.rsrc0 Size: 42KB - Virtual size: 41KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 97KB - Virtual size: 98KB

.rsrc0
Size: 42KB - Virtual size: 41KB