8e36aeb1b9c88be286cd93df8c8d353575af007a5a8751f15ee0aa4eee564528

General

Target

8e36aeb1b9c88be286cd93df8c8d353575af007a5a8751f15ee0aa4eee564528
Size

52KB
MD5

10ab3d37d870fd224a5d860b41c4a0e0
SHA1

ccc1cf26df47f3dd5debaa44f3e3cb89e3e31734
SHA256

8e36aeb1b9c88be286cd93df8c8d353575af007a5a8751f15ee0aa4eee564528
SHA512

bf9628855374a5b7adb8e9c8bf0bdef4f7c1baf3a0657b61aa75d59c0b6db031509a13110795db837885810658a27c67250684bce267312b90351fedd0774da4
SSDEEP

768:cNOCgfO6JRDNImQwYr2xO114jAsYlymrCnmQ+fNcgk3CLUt4v/4clGlkqbpv:tJRDNvCr2g114jyZGmd/4cl2x

Score

N/A

Malware Config

Signatures

Files

8e36aeb1b9c88be286cd93df8c8d353575af007a5a8751f15ee0aa4eee564528
.exe windows x86

21635d3cfbd32e3734b57bbd0876d46a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vssapi

ord6

kernel32

DeleteCriticalSection
WaitForSingleObject
GetTickCount
UnhandledExceptionFilter
Module32NextW
LoadLibraryA
DuplicateHandle
CloseHandle
QueryPerformanceCounter
OpenProcess
IsDebuggerPresent
LocalFree
FormatMessageW
LeaveCriticalSection
GetModuleFileNameW
TerminateProcess
Process32NextW
GetModuleHandleW
GetCurrentProcessId
CreateToolhelp32Snapshot
CreateEventW
Sleep
LoadLibraryW
InitializeCriticalSection
WaitForMultipleObjects
GetProcAddress
GetStartupInfoW
EnterCriticalSection
HeapSetInformation
DeviceIoControl
GetOverlappedResult
SetLastError
SetEvent
FreeLibrary
GetSystemTimeAsFileTime
Module32FirstW
GetLastError
Process32FirstW
ReadFile
CreateFileW
GetCurrentThreadId
GetVersionExW
GetCurrentProcess
SetUnhandledExceptionFilter
VirtualAllocEx

advapi32

LookupPrivilegeValueW
OpenProcessToken
AdjustTokenPrivileges

ole32

CoInitializeSecurity
CoInitialize
CoUninitialize

gdi32

CreateDCW
GetDCBrushColor
SetColorAdjustment

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21635d3cfbd32e3734b57bbd0876d46a

Headers

DLL Characteristics

File Characteristics

Imports

vssapi

kernel32

advapi32

ole32

gdi32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 5KB - Virtual size: 8KB

.rsrc Size: 31KB - Virtual size: 30KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 31KB - Virtual size: 30KB