61f1411df0d88e86964ab20ad6c244091ba27ab6

General

Target

61f1411df0d88e86964ab20ad6c244091ba27ab6
Size

470KB
MD5

c314555036a5d02a1d41c00a40839ecd
SHA1

61f1411df0d88e86964ab20ad6c244091ba27ab6
SHA256

5ad6edc6a69460570f062657d5fbf66f69a42a177f734460660266cf8a717384
SHA512

6d9225acd97b9b6b2074a2e2db45034b1749e7aff5bb8e739451bcc21421dc463f7cc918e3070bc1015911bf05fc9ba037c722361a08fdbd68a6f23c235d60a6
SSDEEP

6144:9Skl/aEEO6InzMBtIZ93F2lZ89uyAJph8n/Sr5a3o/GuxzGiqgI+LZ2G+3CJ93:4gS9kn4sDYQYnJphTsxuPqg1F2CJ93

Score

N/A

Malware Config

Signatures

Files

61f1411df0d88e86964ab20ad6c244091ba27ab6
.exe windows x86

34702a1f8fd4ce1e76c08aabc5b8dbcd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadBitmapA
LoadIconA
GetDesktopWindow
ShowWindow

kernel32

HeapCreate
ExitProcess
GetTickCount
WriteFile
Sleep
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
FindClose
ResetEvent
LoadLibraryA
OpenEventA
FindNextChangeNotification
CloseHandle
GetSystemTime
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 282KB - Virtual size: 820KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34702a1f8fd4ce1e76c08aabc5b8dbcd

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 282KB - Virtual size: 820KB

.rsrc Size: 154KB - Virtual size: 153KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 282KB - Virtual size: 820KB

.rsrc
Size: 154KB - Virtual size: 153KB