cd9390a91cc2599beac9eb74b44d2dde936fa2a80ed8302e32c6b5249f6b07ab

Sharing

Copy URL

Twitter E-mail

General

Target

cd9390a91cc2599beac9eb74b44d2dde936fa2a80ed8302e32c6b5249f6b07ab
Size

408KB
MD5

5919e604e52c1111af34ab053bb340ab
SHA1

3fc82649b3805215ac89618c55978be81d0477d6
SHA256

cd9390a91cc2599beac9eb74b44d2dde936fa2a80ed8302e32c6b5249f6b07ab
SHA512

0e4c4440d6cb4c939b9afacb647eaed46cc200dce5ec2ad95c671aa07e8ebfc38287cc351b4cdb492b33a59f0a8e60d784fa08b350663fffe3f2516e689de0a4
SSDEEP

6144:Gc1Du6tgHtCXClcqx4k+cUAtFj04SNZg/7+yaU:/Vu6tgHtKscqZdxnsNgx

Score

N/A

Malware Config

Signatures

Files

cd9390a91cc2599beac9eb74b44d2dde936fa2a80ed8302e32c6b5249f6b07ab
.exe windows x86

1a9f2a8d8b502f824e24a84516866117

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
FindResourceExW
InterlockedIncrement
ReadConsoleA
GetConsoleAliasA
SetMailslotInfo
SetEvent
SleepEx
GetModuleHandleW
GetConsoleAliasesLengthA
GlobalAlloc
ReadConsoleInputA
GetVersionExW
GetFileAttributesA
DnsHostnameToComputerNameW
GetTimeFormatW
GetOverlappedResult
SetConsoleTitleA
EnumSystemLocalesA
GetConsoleAliasesW
GetStdHandle
GetLongPathNameW
GetProcAddress
VirtualAlloc
GetAtomNameA
UnhandledExceptionFilter
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
SetLocaleInfoW
GetStringTypeW
GetConsoleTitleW
WriteProfileStringW
GetFileTime
CreateThread
GetComputerNameA
MultiByteToWideChar
GetLastError
HeapReAlloc
HeapAlloc
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
DeleteCriticalSection
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
CloseHandle
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetLocaleInfoA
CreateFileA
ReadFile
SetStdHandle
FlushFileBuffers
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap

advapi32

ReportEventA

winhttp

WinHttpCloseHandle

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a9f2a8d8b502f824e24a84516866117

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

winhttp

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 242KB - Virtual size: 242KB

.data Size: 34KB - Virtual size: 52KB

.rsrc Size: 58KB - Virtual size: 57KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 242KB - Virtual size: 242KB

.data
Size: 34KB - Virtual size: 52KB

.rsrc
Size: 58KB - Virtual size: 57KB