3e47b667749503912c904eb70c408eda43f685429f3c8ba4852055b42df7fe72

General

Target

3e47b667749503912c904eb70c408eda43f685429f3c8ba4852055b42df7fe72
Size

24KB
MD5

37391aac087c5a5a5c6597c98c60c3bc
SHA1

3807ba47187ec6f409e173d4ba96548299053162
SHA256

3e47b667749503912c904eb70c408eda43f685429f3c8ba4852055b42df7fe72
SHA512

8c062106da246c3cfd539b9694dca50f566ced2e840e5c749f1562b66796b81e8f6be128103750d8468bc65e6f37b9d3a6a2fef806d04d9aaabae5e1338aeb06
SSDEEP

768:NONKPILf78KgCLuUFZSU9Zi1Rzop8Qhdbwfv:NONKPa3giuQZmWp8Qh6X

Score

N/A

Malware Config

Signatures

Files

3e47b667749503912c904eb70c408eda43f685429f3c8ba4852055b42df7fe72
.exe windows x86

ce57e91406637c2a00a26c3b8b296fc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

LoadStringW
OemToCharW

utildll

TestUserForAdmin

ntdll

wcsncpy
_wcsnicmp
wcschr
_ultoa
wcstoul
wcscmp
wcscpy
wcscat
wcslen
RtlImageNtHeader
wcstol
memmove
_wcslwr

msvcrt

vswprintf
malloc
free
_iob
fprintf
vfwprintf
_wcsdup
_exit
setlocale
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
fwprintf
exit

kernel32

GetFileSize
WideCharToMultiByte
GetACP
GetOEMCP
GetFileAttributesW
FindFirstFileW
FindNextFileW
GetCommandLineW
LocalAlloc
LocalFree
GetStdHandle
GetFileType
WriteConsoleW
FormatMessageW
GetModuleHandleW
MultiByteToWideChar
SetLastError
LoadLibraryW
FreeLibrary
CreateFileW
GetLastError
CloseHandle
MapViewOfFile
CreateFileMappingW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce57e91406637c2a00a26c3b8b296fc4

Headers

DLL Characteristics

File Characteristics

Imports

user32

utildll

ntdll

msvcrt

kernel32

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 1024B - Virtual size: 5KB

.rsrc Size: 12KB - Virtual size: 32KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 1024B - Virtual size: 5KB

.rsrc
Size: 12KB - Virtual size: 32KB