2b7658e1b7cf6a934bbede6bbf9287be715596650440e93475d8b1b802461c80

General

Target

2b7658e1b7cf6a934bbede6bbf9287be715596650440e93475d8b1b802461c80
Size

1.9MB
MD5

8a08d916f290a812b17a588332a535c4
SHA1

bc0b26b2334556fee6350f0089ff6fb90d2ef07b
SHA256

2b7658e1b7cf6a934bbede6bbf9287be715596650440e93475d8b1b802461c80
SHA512

d78bb0b3ffe77c6eb0256a90ec6b93cf609bbbc5c5bbfc280f26be86324a81b3f41f18350667ba9200bd3b4cb725e2bc5816940ac5a99e6797b064fa5e77460b
SSDEEP

49152:xNTO9dl8VFdp8VqUgdd68VZ8kDAOMaU3tyhxQpqUmfU2FZPAvkw/y:xE8rdDRAOMaU9y4Xms2FRY/y

Score

N/A

Malware Config

Signatures

Files

2b7658e1b7cf6a934bbede6bbf9287be715596650440e93475d8b1b802461c80
.exe windows x86

c3329a2f7d0e80fd5ea2600cfe6c13bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadResource
SizeofResource
GetProcAddress
VirtualAlloc
LoadLibraryA
LockResource
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
InterlockedExchange
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetLocaleInfoW
ReadFile
FlushFileBuffers
CreateFileA
CloseHandle
InitializeCriticalSection

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3329a2f7d0e80fd5ea2600cfe6c13bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 116KB - Virtual size: 115KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.text
Size: 116KB - Virtual size: 115KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB