b2a9ad8c65043f68e83a4bcbb1a28de838a78a934c65dfb1e4fe49ea1cda2b44

General

Target

b2a9ad8c65043f68e83a4bcbb1a28de838a78a934c65dfb1e4fe49ea1cda2b44
Size

330KB
MD5

0c65c9858d11d6a6db277f6669092b9a
SHA1

f74864181f852e4c07b88145deab3e3591461ab4
SHA256

b2a9ad8c65043f68e83a4bcbb1a28de838a78a934c65dfb1e4fe49ea1cda2b44
SHA512

717a0314e504debc74680bd111db7ec0166a34721002b03b4eace88099f69fbcf4f7c9780eb8b0cc3caa8270a5c455288e01645092efe2c55bfe6d9c5c206431
SSDEEP

6144:/OXev74zue74KwdT2eFr6SLFdVB43K7H9DSbqLnFF3bXznBnOn4a:7te8l2azZdMeAGdvBO4a

Score

N/A

Malware Config

Signatures

Files

b2a9ad8c65043f68e83a4bcbb1a28de838a78a934c65dfb1e4fe49ea1cda2b44
.exe windows x86

5f905a2beb0cf6ed729895f3796c48e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryExA
ReadFile
VirtualAllocEx
CloseHandle
CopyFileW
CreateFileW
CreateProcessW
CreateThread
DeleteFileW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToDosDateTime
FileTimeToLocalFileTime
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
LocalAlloc
LocalFree
QueryPerformanceCounter
SetCurrentDirectoryA
SetErrorMode
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW

user32

LoadIconA
GetSysColor
LoadCursorA

msvcrt

memset
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_ltow
_wcslwr
_wfopen
_wfullpath
_wsplitpath
exit
fclose
floor
fwprintf
swprintf
wcsncpy
wcsstr

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f905a2beb0cf6ed729895f3796c48e8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 4KB - Virtual size: 4KB

.text3 Size: 512B - Virtual size: 100B

.text2 Size: 512B - Virtual size: 100B

.data Size: 273KB - Virtual size: 272KB

.rsrc Size: 41KB - Virtual size: 40KB

.text
Size: 4KB - Virtual size: 4KB

.text3
Size: 512B - Virtual size: 100B

.text2
Size: 512B - Virtual size: 100B

.data
Size: 273KB - Virtual size: 272KB

.rsrc
Size: 41KB - Virtual size: 40KB