aee5f33c7a36b8d5abf48afc49683e074ee531a96881ebe9c913d874727cbcee

General

Target

aee5f33c7a36b8d5abf48afc49683e074ee531a96881ebe9c913d874727cbcee
Size

157KB
MD5

c516aa7d3f77f48767d2aad6c506bb19
SHA1

8d9218ff23dcabf95216fbd12aaa9a83fa0ee153
SHA256

aee5f33c7a36b8d5abf48afc49683e074ee531a96881ebe9c913d874727cbcee
SHA512

4c4eabcc3cb319350b09b7ef9ca768d24ecea623978bd81254fedbce1bd9b904728d07735194dc526e21bdd9872be08d982a369ae9596ad275ba036efa9e7ab8
SSDEEP

3072:vaDKcbbWiQQLfeZea2ab8Wka54nhQ02TNk1eyvPaGUOAp78/0zvcL1Qk:vE9bb2QLf8bkY4nhQxliJUOeMLv

Score

N/A

Malware Config

Signatures

Files

aee5f33c7a36b8d5abf48afc49683e074ee531a96881ebe9c913d874727cbcee
.exe windows x86

46a14624da7c48581c61c4e44ee80afd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord195

user32

SetWindowTextA
LoadIconA
LoadCursorFromFileA
GetWindowDC
GetForegroundWindow
AnimateWindow
CloseWindow
GetDesktopWindow
IsWindow

kernel32

TlsGetValue
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
Sleep
InterlockedIncrement
GetCurrentProcessId
CreateEventA
GetModuleHandleA
GetEnvironmentStringsW
VirtualAlloc
GetCurrentThread
GetCommandLineA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
SetEnvironmentVariableA
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

46a14624da7c48581c61c4e44ee80afd

Headers

DLL Characteristics

File Characteristics

Imports

msi

user32

kernel32

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 111KB - Virtual size: 192KB

.rsrc Size: 1024B - Virtual size: 648B

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 111KB - Virtual size: 192KB

.rsrc
Size: 1024B - Virtual size: 648B