4a191c762591703dbbfabfcc04586b778ba2c93d2ae0f26041c95da21b87dc5e

General

Target

4a191c762591703dbbfabfcc04586b778ba2c93d2ae0f26041c95da21b87dc5e
Size

251KB
MD5

a964af3c28ddb8261c7fcb4a2c32bca9
SHA1

9183e0d998b16edcef55c12d28386a1ee657de7b
SHA256

4a191c762591703dbbfabfcc04586b778ba2c93d2ae0f26041c95da21b87dc5e
SHA512

ea3e91dbfbe38a234a8d7957f7854e68377b8db1b181a0e9064b050403345c64a333bd41f702187be88a6e05bc991e0b59e34813f44acd219c88aafb931d1466
SSDEEP

6144:zaAELcw3oMjkYvQUbsKidemEt9cr+cOz+8nWIYT+H0iF47wO:zaAELcw3oMjkYvQUbs9dcI+cOw7T+Hbu

Score

1^/10

Malware Config

Signatures

Files

4a191c762591703dbbfabfcc04586b778ba2c93d2ae0f26041c95da21b87dc5e
.exe windows x86

4daca7182a967075c4a8cd470c438efe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
AreFileApisANSI
InitializeCriticalSection
FreeConsole
GetCurrentProcess
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4daca7182a967075c4a8cd470c438efe

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 179KB - Virtual size: 181KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 179KB - Virtual size: 181KB

.rsrc
Size: 1KB - Virtual size: 1KB