53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64

Sharing

Copy URL

Twitter E-mail

General

Target

53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64
Size

327KB
MD5

bded054d3176eefeedb4470df9ee4716
SHA1

27588165c1235dc41214195030d5620091d41261
SHA256

53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64
SHA512

372195ea89bb3bf7aa4bf73253e86ee165ab7773440c1969a4297879f6e129ad66944c973a96f136b51a670b4347004bf6546b1c6259edf9ecd48c6874ce3907
SSDEEP

6144:uMP3iTKSHRsjwK2xPEBBL5Ehs5ufChdO8HMTZYkshL3:X8/HR0wK2xa73vMZ+L3

Score

N/A

Malware Config

Signatures

Files

53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64
.exe windows x86

50ad8a6cfc28fb3d9a0514566d9ffd7d

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexW
GetLocaleInfoA
FindResourceExW
SetHandleInformation
GetModuleHandleW
GetConsoleTitleA
WriteFile
SetSystemPowerState
GetACP
SetConsoleTitleA
GetProcAddress
LocalAlloc
SetConsoleWindowInfo
GetOEMCP
GetCurrentProcessId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
Sleep
ExitProcess
GetLastError
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
HeapFree
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetCPInfo
IsValidCodePage
CreateFileA
SetStdHandle
HeapAlloc
VirtualAlloc
HeapReAlloc
FlushFileBuffers
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
GetProcessHeap
ReadFile

Exports

Exports

@GetVice@0

Sections

.text
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 35.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sefeyap
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xawuv
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50ad8a6cfc28fb3d9a0514566d9ffd7d

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 262KB - Virtual size: 262KB

.data Size: 32KB - Virtual size: 35.5MB

.sefeyap Size: 512B - Virtual size: 1B

.xawuv Size: 1024B - Virtual size: 963B

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 262KB - Virtual size: 262KB

.data
Size: 32KB - Virtual size: 35.5MB

.sefeyap
Size: 512B - Virtual size: 1B

.xawuv
Size: 1024B - Virtual size: 963B

.rsrc
Size: 29KB - Virtual size: 29KB