b018c6a1f352aab930d5cee52af0bc8deb808426787e75ea1f5a5b27a8a543e2

General

Target

b018c6a1f352aab930d5cee52af0bc8deb808426787e75ea1f5a5b27a8a543e2
Size

88KB
MD5

a25c70a9d6870aee7339970f0aa79610
SHA1

564b87faeba62dc74123308ec1f88a81cd1755ee
SHA256

b018c6a1f352aab930d5cee52af0bc8deb808426787e75ea1f5a5b27a8a543e2
SHA512

11577689e71ead7cf0e6e26bf56bb0d5258c075c056bff9e3a3adcb826b6ba082ca1d0e84d26ab1d5f06e567790160148ea2db6c6f3c105d93c70e1b4f88644d
SSDEEP

1536:t6+ZM4hqUNaUjVDUGcipIqMpmRCLgVVCFswEV:tk4ZNaklpIqC4CLgvwAV

Score

N/A

Malware Config

Signatures

Files

b018c6a1f352aab930d5cee52af0bc8deb808426787e75ea1f5a5b27a8a543e2
.exe windows x86

8ae3c3d66688e8ebf39bf45a4dfc29f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseEventLog

clusapi

ClusterGroupOpenEnum
ClusterGroupCloseEnum
GetClusterNotify
ClusterResourceEnum
ClusterNodeEnum
CreateClusterResource
GetClusterFromResource
ClusterNetworkOpenEnum

kernel32

GetLastError
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapCreate
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
IsValidCodePage
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryW
IsProcessorFeaturePresent
LCMapStringW
RtlUnwind
HeapReAlloc
HeapSize

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 787KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ae3c3d66688e8ebf39bf45a4dfc29f4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

clusapi

kernel32

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 3KB - Virtual size: 787KB

.rsrc Size: 33KB - Virtual size: 32KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 3KB - Virtual size: 787KB

.rsrc
Size: 33KB - Virtual size: 32KB