00fd74dd5519249df4a2ac90f8d22616d2a068c520d41ee19b53c7311ab65550

Sharing

Copy URL

Twitter E-mail

General

Target

00fd74dd5519249df4a2ac90f8d22616d2a068c520d41ee19b53c7311ab65550
Size

431KB
MD5

01908989c865949654fd19b58fc9657c
SHA1

a515287d73a6655c01accf6ca3705dd19c9b0d21
SHA256

00fd74dd5519249df4a2ac90f8d22616d2a068c520d41ee19b53c7311ab65550
SHA512

a93c0f6d739cba56a730a99600f226df68083e136d5be125c9448effd79662ea6019f9a0129b2782afc86e55c8f12bf05b4066791c30550265323cc83477b062
SSDEEP

3072:oTz0PsplOX2DM5NcRRBo1yqzdu5/gNslCXOphrCyYSUb4ySQ8hYb2SjjjjjjjeAt:A0kE2DU6WHy/BCephrDcfSQ87rE

Score

N/A

Malware Config

Signatures

Files

00fd74dd5519249df4a2ac90f8d22616d2a068c520d41ee19b53c7311ab65550
.exe windows x86

992ce9c65912e58a24f2e404d7ea86d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapUnlock
GlobalAlloc
GetModuleHandleA
GetTapeStatus
WriteTapemark
GetConsoleDisplayMode
VerifyVersionInfoW
CreateMutexA
WritePrivateProfileSectionA
SetEvent
DeleteCriticalSection
LocalSize
SetEndOfFile
WriteProcessMemory
GetFileAttributesW
PulseEvent
FindResourceExA
GetConsoleTitleW
FreeConsole
AllocConsole
LoadLibraryA
VirtualProtect
HeapAlloc
GetConsoleAliasW
lstrlenA
lstrlenW
GetLastError
ReadFile
CreateFileA
CloseHandle
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

user32

GetCaretPos

advapi32

ReportEventA

ole32

CoBuildVersion

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 187KB - Virtual size: 30.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

992ce9c65912e58a24f2e404d7ea86d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 85KB - Virtual size: 85KB

.data Size: 187KB - Virtual size: 30.9MB

.tls Size: 46KB - Virtual size: 45KB

.rsrc Size: 112KB - Virtual size: 111KB

.text
Size: 85KB - Virtual size: 85KB

.data
Size: 187KB - Virtual size: 30.9MB

.tls
Size: 46KB - Virtual size: 45KB

.rsrc
Size: 112KB - Virtual size: 111KB