52dcf5bad7502db83e156af2c4102e1e9bfb577a60cfc0d63652b74651145644

General

Target

52dcf5bad7502db83e156af2c4102e1e9bfb577a60cfc0d63652b74651145644
Size

91KB
MD5

37fb1e16bdb9ab57f18aaf4186231830
SHA1

bf386e044afefde3e16415c51b8b9b962ecbb241
SHA256

52dcf5bad7502db83e156af2c4102e1e9bfb577a60cfc0d63652b74651145644
SHA512

699f4673b6f01c8446099d73921ea1032dd3316fec711e7df74f4fac82ad8bb6f3563e3a8fbd771e5148557e3b5145dc9178faa5ff72f0320a1dfd6891cf2ddc
SSDEEP

1536:ek2deBpYMzJvSILDoNuBnqalgUG1p7nVwnw2XC5:6d6pRCNuRqhNprVWw2X

Score

N/A

Malware Config

Signatures

Files

52dcf5bad7502db83e156af2c4102e1e9bfb577a60cfc0d63652b74651145644
.exe windows x86

0e2e9de277e119ac75c8bdd7c42a4ed2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winhttp

WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ExitProcess
CreateFileA
GetThreadIOPendingFlag
GlobalAlloc
ReadFile
GetLocalTime
GetModuleFileNameA
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

msvcr90

_initterm
_initterm_e
_acmdln
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_configthreadlocale

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e2e9de277e119ac75c8bdd7c42a4ed2

Headers

DLL Characteristics

File Characteristics

Imports

winhttp

kernel32

msvcr90

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 77KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 77KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 1024B - Virtual size: 720B