6968ef1ff1b61207297093d4d27e39838d5cffca4dadc267b15358bc84864860

General

Target

6968ef1ff1b61207297093d4d27e39838d5cffca4dadc267b15358bc84864860
Size

201KB
MD5

29eea1afc305153abd0167023f1c1090
SHA1

70d724ce74b118d1106ad0240a0800fda026aae9
SHA256

6968ef1ff1b61207297093d4d27e39838d5cffca4dadc267b15358bc84864860
SHA512

3a53ff67888130bb1ffd20b48eb5b13f22e10bc947117daa864b5b7395def537d5027624c98fbdd907bdb670f5475b5b0788c753227db1a47771473c75c0b1a4
SSDEEP

3072:y25IaLE0BrwsBfxDJsT13OSX/jlFr7ocdh0CJOzMrWXQxodoPjbyiLbORVZceN:tJbN1j94zPjlrC7zwWCoK/HbOVZNN

Score

N/A

Malware Config

Signatures

Files

6968ef1ff1b61207297093d4d27e39838d5cffca4dadc267b15358bc84864860
.exe windows x86

e0acac9d26bcaa8fb6271a83742d3867

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord5
OleUIPasteSpecialW
OleUIEditLinksW
OleUIPromptUserW
ord12

kernel32

TlsFree
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
HeapSize

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0acac9d26bcaa8fb6271a83742d3867

Headers

DLL Characteristics

File Characteristics

Imports

oledlg

kernel32

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 6KB - Virtual size: 9KB

.rsrc Size: 167KB - Virtual size: 167KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 6KB - Virtual size: 9KB

.rsrc
Size: 167KB - Virtual size: 167KB