304e96678161985dca93f5f93a974753289ec353472f70545370c82246e9c8fd

General

Target

304e96678161985dca93f5f93a974753289ec353472f70545370c82246e9c8fd
Size

411KB
MD5

08ea3308a37b4cc4d450fcf5f29ea4b4
SHA1

2c40f7e93e0422541ab271a54b4b558d2e8a5637
SHA256

304e96678161985dca93f5f93a974753289ec353472f70545370c82246e9c8fd
SHA512

c929750a4f81fe9534d5130cf8caa05eeef12a858610087077f054a1f229719ae4d90e42b1007f729fca0037624635898bc2744d6146157082f99ff15e412cf9
SSDEEP

12288:PJUG04c4V+T2CFIdKJpuBZ6TBUT6oi1THiRf:BR5+T2Ew2xHGf

Score

N/A

Malware Config

Signatures

Files

304e96678161985dca93f5f93a974753289ec353472f70545370c82246e9c8fd
.exe windows x86

d9e275fd64bc935bfc65c2f9e9abbff5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GlobalSize
GlobalAlloc
HeapFree
LeaveCriticalSection
GetStdHandle
WaitForSingleObject
InterlockedIncrement
Sleep
GetVersionExA
WaitForSingleObjectEx
GetEnvironmentStringsW
GetCurrentProcess
InitializeCriticalSection
MultiByteToWideChar
EnterCriticalSection
FreeEnvironmentStringsW
InterlockedDecrement
QueryPerformanceCounter
GetCommandLineW
GetModuleHandleW
LCMapStringW
TryEnterCriticalSection
HeapDestroy
SetHandleCount
FindFirstFileW
CloseHandle
FreeLibrary
FindClose
LocalFree
WriteFile
CreateFileA
GetModuleFileNameA
lstrlenW
LoadLibraryA
WideCharToMultiByte
ReadFile
DeleteCriticalSection
InterlockedCompareExchange
GetVersionExW
CompareStringW
CompareStringA
GetLocaleInfoW
SetEnvironmentVariableA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
HeapCreate
VirtualFree
RtlUnwind
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
LCMapStringA
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation

mpr

WNetGetConnectionA

setupapi

SetupGetLineTextA

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9e275fd64bc935bfc65c2f9e9abbff5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mpr

setupapi

Sections

.text Size: 108KB - Virtual size: 107KB

.data Size: 299KB - Virtual size: 298KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 108KB - Virtual size: 107KB

.data
Size: 299KB - Virtual size: 298KB

.rsrc
Size: 3KB - Virtual size: 3KB