d9c7a9eb03fd1159cab05c81ea1e9f8b9a3284dc908f0544a90d5e46dfec08b3

General

Target

d9c7a9eb03fd1159cab05c81ea1e9f8b9a3284dc908f0544a90d5e46dfec08b3
Size

96KB
MD5

94116665abf660085979db18c5a607f1
SHA1

6b8c01cb21ed41b4fabf79817f0c91b2e04c9fae
SHA256

d9c7a9eb03fd1159cab05c81ea1e9f8b9a3284dc908f0544a90d5e46dfec08b3
SHA512

b18656cbfe150051ff17b4101e6dfc75cf9b2e0c02b6aa9e6d3417c26a21be10e0ab958b78a2aa0e557a6c284d5886f14c6233d40fe925186a19e9aa4a9c0a37
SSDEEP

1536:IDAgiCoXBvCNSBCTtJcq7wmiFv7N6xWyOwOCt+tMpiLP7RKCwcNho:aTolkI5SY17z6Qq87gCwcNho

Score

N/A

Malware Config

Signatures

Files

d9c7a9eb03fd1159cab05c81ea1e9f8b9a3284dc908f0544a90d5e46dfec08b3
.exe windows x86

de5d7c692f78b61795356da1fa40028b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LockResource
LoadResource
FindResourceA
GetModuleHandleA
LoadLibraryA
GetLastError
GetCurrentProcess
lstrcmpiW
GetStringTypeA
LCMapStringW
VirtualAlloc
GetVersionExA
VirtualProtect
GetTickCount
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

GetSysColorBrush

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de5d7c692f78b61795356da1fa40028b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 24KB

.tls Size: 4KB - Virtual size: 44B

.rsrc Size: 68KB - Virtual size: 64KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 24KB

.tls
Size: 4KB - Virtual size: 44B

.rsrc
Size: 68KB - Virtual size: 64KB