1f601961c094c55cfe272850db469a5d948437f69661929b5438c4bef5860cd3

General

Target

1f601961c094c55cfe272850db469a5d948437f69661929b5438c4bef5860cd3
Size

111KB
MD5

9690ed33e7e361128dbe5d7b01ea5fdd
SHA1

761db98fd11af224c8c624102302978366d9bfda
SHA256

1f601961c094c55cfe272850db469a5d948437f69661929b5438c4bef5860cd3
SHA512

38a40443ae52193bb97476418e3fc5e5784222884a1ca5eff3bef8f89a327585d409054fd222e8f4e149c6111d05c965fafcf7b2fdf731dc83efc0113544aff5
SSDEEP

1536:XeEpbrrr0gXTVn2oYuAPODX4ckUgz07poaZ:Xx9VXdDYfPegz07pd

Score

1^/10

Malware Config

Signatures

Files

1f601961c094c55cfe272850db469a5d948437f69661929b5438c4bef5860cd3
.exe windows x86

77b1930385b4b41af436e87a5b946f1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
CloseHandle
GetModuleFileNameA
CreateMutexA
GetLastError
LoadLibraryA
GetProcAddress
Sleep
FlushFileBuffers
CreateFileW
WriteConsoleW
SetStdHandle
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileAttributesA
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
IsProcessorFeaturePresent
EncodePointer
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77b1930385b4b41af436e87a5b946f1a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 49KB - Virtual size: 49KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 49KB - Virtual size: 49KB

.reloc
Size: 5KB - Virtual size: 5KB