9bed6439727af9616c7d04ad12a4b4f8adbbc60bc26ab93eda18c415efb63d98

General

Target

9bed6439727af9616c7d04ad12a4b4f8adbbc60bc26ab93eda18c415efb63d98
Size

62KB
MD5

4b31781c3979c1a69a84162ef101a04c
SHA1

a03ffae449b00a41dc32c3a2ccf915fbbe868174
SHA256

9bed6439727af9616c7d04ad12a4b4f8adbbc60bc26ab93eda18c415efb63d98
SHA512

b28f88c1b6926e3ea5e4ca4366aeb6d998f3a001b534e1aedd699e8dd057d718e5c33b599dbd12c28b1898565ac89960eaf6e3d7f09f49a24f26621673f9a404
SSDEEP

1536:pYGBfdJBoOY4zW7T2yqrqDlRHhFRIZHxb:TfXU7sUlbXIl5

Score

N/A

Malware Config

Signatures

Files

9bed6439727af9616c7d04ad12a4b4f8adbbc60bc26ab93eda18c415efb63d98
.exe windows x86

f7bc6f3e91aaed52f466042510d68e59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
TerminateProcess
GetExitCodeThread
WaitForSingleObject
SetEnvironmentVariableA
GetLastError
CreateProcessA
OpenProcess
CreateRemoteThread
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
FreeLibrary
LoadLibraryA
GetVersionExA
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapSetInformation
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetCurrentProcess
IsProcessorFeaturePresent
GetModuleHandleW
ExitProcess
LoadLibraryW
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetHandleCount
GetStartupInfoW
Sleep
HeapFree
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetStdHandle
RtlUnwind
HeapAlloc
HeapReAlloc
LCMapStringW
GetStringTypeW
HeapSize
CreateFileW
ReadConsoleInputA
SetConsoleMode

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7bc6f3e91aaed52f466042510d68e59

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 6KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 6KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB