c4e6cd71d8f5ca59121eb00c39b254c0eff946cd45b3e6ee883f0d2f6d5be26b

Sharing

Copy URL

Twitter E-mail

General

Target

c4e6cd71d8f5ca59121eb00c39b254c0eff946cd45b3e6ee883f0d2f6d5be26b
Size

168KB
MD5

7052b1235c4ca77a0cea7f29752b344a
SHA1

4f41e2f96ab9403135edfc2fc40bf0a7b3dee7ae
SHA256

c4e6cd71d8f5ca59121eb00c39b254c0eff946cd45b3e6ee883f0d2f6d5be26b
SHA512

9ec78655f341dd40e3d300a6bfc4807dd3014c0653e269db27ed387fef7d2e51fa1b46abbfa6d6f3d1a9ef723f6c27d71cbc05ed31c6ebc8049969a95bb88b79
SSDEEP

3072:2zQ0rvGnueXOU0Tm1wILjqEVRxSvzT+OW97WXE5dl:4unV+RTm1zjdVCvXrm+yl

Score

N/A

Malware Config

Signatures

Files

c4e6cd71d8f5ca59121eb00c39b254c0eff946cd45b3e6ee883f0d2f6d5be26b
.exe windows x86

ffb37ca3e6db511ebe4905f2753a6990

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructA
CopyFileExW
TlsGetValue
FindResourceExW
LoadResource
InterlockedIncrement
GetComputerNameW
OpenSemaphoreA
_lclose
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
ActivateActCtx
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleMode
GetPrivateProfileStructW
GetVersionExW
GetFileAttributesA
lstrcatA
GetACP
ExitThread
lstrlenW
DisconnectNamedPipe
VirtualUnlock
OpenFile
GetLastError
GetProcAddress
VirtualAlloc
CreateNamedPipeA
IsValidCodePage
SearchPathA
GetLocalTime
LoadLibraryA
LocalAlloc
BuildCommDCBAndTimeoutsW
GetProfileStringA
AddAtomA
GetTapeParameters
SetConsoleCursorInfo
FreeEnvironmentStringsW
WriteProfileStringW
CompareStringA
ScrollConsoleScreenBufferA
DebugBreak
FindActCtxSectionStringW
LocalFree
AreFileApisANSI
lstrcpyA
GetModuleHandleA
DeactivateActCtx
GetThreadContext
GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetCPInfo
GetOEMCP
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException

user32

GetCursorPos

advapi32

SetThreadToken

Exports

Exports

_gekkko@8

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 737KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffb37ca3e6db511ebe4905f2753a6990

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 137KB - Virtual size: 136KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 5KB - Virtual size: 737KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 137KB - Virtual size: 136KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 5KB - Virtual size: 737KB

.rsrc
Size: 8KB - Virtual size: 8KB