c9232cd36d5601257eaa5a1562a98ac73f76a7b8cbb4d4d7b3d75693d3018826

General

Target

c9232cd36d5601257eaa5a1562a98ac73f76a7b8cbb4d4d7b3d75693d3018826
Size

190KB
MD5

37f723065b898f55ac945e269460d818
SHA1

47d2766520e74acfba6dfdedb74172bf17d6b49c
SHA256

c9232cd36d5601257eaa5a1562a98ac73f76a7b8cbb4d4d7b3d75693d3018826
SHA512

2e18ac91e5f7d1d8201a5f2d17bb2207248badcc899ba64c20831568021b96ff42625811d6aba68dfa1237fef8cb9d1a22a4e56520f9e11bb2d65023b3728493
SSDEEP

3072:TWQIIOapbYiBTo5XvtO9lDi4UB0OC0KiN5ngOJrpGuN8sDuJRfU/UvzUjNGKopw:KQrRlsvcUmFrarzbuJFyULUX

Score

N/A

Malware Config

Signatures

Files

c9232cd36d5601257eaa5a1562a98ac73f76a7b8cbb4d4d7b3d75693d3018826
.exe windows x86

44ef92b5d0e8cfb67d8f4bd9b68b8e66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
ClearCommBreak
GetOverlappedResult
Heap32ListNext
GetConsoleMode
Process32NextW
VirtualFreeEx
CreateHardLinkW
FreeEnvironmentStringsA
GetModuleHandleA
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetProcAddress
CreateProcessA
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetLastError
SetConsoleCtrlHandler
MoveFileA
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetFileAttributesA
CompareStringA
CompareStringW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
ReadFile
SetFilePointer
RaiseException

user32

MoveWindow
MapVirtualKeyExW
CharNextW
ShowOwnedPopups
DdeEnableCallback
InSendMessageEx
IMPQueryIMEW
IsWindowEnabled
GetTabbedTextExtentA
GetInputState
LoadBitmapA

Sections

.text
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44ef92b5d0e8cfb67d8f4bd9b68b8e66

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 181KB - Virtual size: 181KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 244KB

.text
Size: 181KB - Virtual size: 181KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 244KB