138e4c4e33a36e147d296a4d9695e3adf1a33611d97e0365dd3884be1c26c60e

Sharing

Copy URL

Twitter E-mail

General

Target

138e4c4e33a36e147d296a4d9695e3adf1a33611d97e0365dd3884be1c26c60e
Size

449KB
MD5

8107f019d9d6fe62a49ce7ad40fa1f7b
SHA1

8bf319aa49589558f0ff482bff805676a7fed109
SHA256

138e4c4e33a36e147d296a4d9695e3adf1a33611d97e0365dd3884be1c26c60e
SHA512

7991048cbc053d71e2d92980e516426d04ef55617e04bd00b568c2e7ebd155211dfd8af8f492614cbe056ade6fb81365dd8a1f5cc94e3dbecbd10edb60a67a61
SSDEEP

6144:tvJCwn5febFGCbTrI5Tm6oUAcEtKY/e8lmceEoAE77OvaHhdRwc9/P2wdAn7gJR:VlebFZrIVpb3F8ltQlBwc9/P2l7gTd

Score

N/A

Malware Config

Signatures

Files

138e4c4e33a36e147d296a4d9695e3adf1a33611d97e0365dd3884be1c26c60e
.exe windows x86

92d4226c83938ab91cca81c9fd7174a8

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

MoveFileExA
GetWindowsDirectoryA
CreateFileA
GetFileSize
LocalAlloc
ReadFile
CloseHandle
WriteFile
DeviceIoControl
OpenMutexW
CreateMutexW
VirtualQuery
VirtualFree
VirtualAlloc
VirtualProtect
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcmpA
OutputDebugStringW
lstrcatW
WaitForSingleObject
ExitProcess
CreateFileW
GetLastError
TlsGetValue
CreateTimerQueueTimer
Sleep
ExitThread
SetFilePointerEx
IsBadReadPtr
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
HeapAlloc
RaiseException
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapFree
SetLastError
WriteConsoleW
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle

advapi32

InitializeSecurityDescriptor
CryptGenRandom

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 349KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92d4226c83938ab91cca81c9fd7174a8

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 349KB - Virtual size: 357KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 349KB - Virtual size: 357KB

.reloc
Size: 5KB - Virtual size: 4KB