a17a3d0d25558f553bf6ffbc3465cee98da1de5c3c9084ca470be80be90d6272

General

Target

a17a3d0d25558f553bf6ffbc3465cee98da1de5c3c9084ca470be80be90d6272
Size

426KB
MD5

a486221d22aaedb86ce6f473c77a7553
SHA1

4006a19034b26449a5400cc432aa080a25ae8990
SHA256

a17a3d0d25558f553bf6ffbc3465cee98da1de5c3c9084ca470be80be90d6272
SHA512

ad7a293429b0a3c02144b156cd783bec4c87fa1ea8d25090a979fd5c64c2474ea25ab7edde280143f6d06bc84487131e8b952d8a86f59bc489744c2c31f19552
SSDEEP

12288:5ceTcSC4jpVZkT1BYMqL1qULuR+loiReROI:5TW4jpVZa15qL1qTMl2MI

Score

N/A

Malware Config

Signatures

Files

a17a3d0d25558f553bf6ffbc3465cee98da1de5c3c9084ca470be80be90d6272
.exe windows x86

0bc067ff0a17c1f75630a92ad5b94a2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
WaitForSingleObject
CreateThread
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bc067ff0a17c1f75630a92ad5b94a2b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 371KB - Virtual size: 370KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 371KB - Virtual size: 370KB

.reloc
Size: 5KB - Virtual size: 5KB