ce64faa8d1fc479d19d5878a6109d4737df3469058a44e08d0c5316c99faebcb

General

Target

ce64faa8d1fc479d19d5878a6109d4737df3469058a44e08d0c5316c99faebcb
Size

238KB
MD5

3ba8fa7b51e100e3b402861cad2ee77b
SHA1

c895591d707e457b1471a1625b368edde0dc6886
SHA256

ce64faa8d1fc479d19d5878a6109d4737df3469058a44e08d0c5316c99faebcb
SHA512

c37a152b6aa3ebca5820d208936c129d308d4770c74075746cc0f5a847b4365d75735cb0331b5fbc504f58882304e05fadca7365fecc8e28aabe224d9a7e50cd
SSDEEP

3072:p5aZ/2SQ3Gh7WGfaoCTvhRsljodBRd9vYtMAvO+oT8tO5m/WiCRqktptFo:p5x3UhfaHLd3gtB1Sm/QRqktp

Score

N/A

Malware Config

Signatures

Files

ce64faa8d1fc479d19d5878a6109d4737df3469058a44e08d0c5316c99faebcb
.exe windows x86

b7d71421d1e8cfccdee23b1cef027d33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
BackupSeek
Beep
AreFileApisANSI
BeginUpdateResourceW
GlobalAddAtomW
GetProcAddress
LoadLibraryA
BackupRead
GlobalAddAtomA
BuildCommDCBAndTimeoutsA
AddAtomW
BuildCommDCBAndTimeoutsW
AssignProcessToJobObject
BeginUpdateResourceA
AddAtomA
BuildCommDCBA
VirtualAlloc
lstrcatA
GetCurrentDirectoryA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7d71421d1e8cfccdee23b1cef027d33

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 194KB - Virtual size: 193KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 1KB - Virtual size: 238KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 194KB - Virtual size: 193KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 1KB - Virtual size: 238KB

.rsrc
Size: 5KB - Virtual size: 4KB