9708d90345b8ee96db4d16c9a6dfb310d7030b5d9b68ff464bb5047012f25044

General

Target

9708d90345b8ee96db4d16c9a6dfb310d7030b5d9b68ff464bb5047012f25044
Size

158KB
MD5

b453e677201ffde6f2b8e5ae6f9dfb0f
SHA1

e9cb962defc59a9f67f280bb5d1dbfd7cafb1c40
SHA256

9708d90345b8ee96db4d16c9a6dfb310d7030b5d9b68ff464bb5047012f25044
SHA512

b509ac7a8d90b55a293e755043641ddd16549363aca235fe947bc183d7b0db93c4135e1f95b1de07e95ea9f24ad3efce4beee104bc147cda7d3d1339f13b926e
SSDEEP

3072:HQRsEiIHDDB41Z32a0qqEZC78javoZFqZtpvMSweSUXzK0m22uRlm3p8:Ho7ieDB4HhCg2v+FGtmedXXauRY

Score

N/A

Malware Config

Signatures

Files

9708d90345b8ee96db4d16c9a6dfb310d7030b5d9b68ff464bb5047012f25044
.exe windows x86

ec37b73a0af45bac2a308192d1069206

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msi

ord65

kernel32

CreateSemaphoreA
CreateEventA
GetCommandLineA
GetModuleHandleA
GetTickCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetPriorityClass
GetCommandLineW
GetVersionExA
GetCurrentProcessId
IsDebuggerPresent
CompareStringW
VirtualAlloc
TlsGetValue
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
SetEnvironmentVariableA
GetLastError
GetCurrentThread
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA

gdi32

GetRasterizerCaps
GetTextColor
SetTextAlign

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec37b73a0af45bac2a308192d1069206

Headers

DLL Characteristics

File Characteristics

Imports

msi

kernel32

gdi32

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 111KB - Virtual size: 196KB

.rsrc Size: 1024B - Virtual size: 608B

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 111KB - Virtual size: 196KB

.rsrc
Size: 1024B - Virtual size: 608B