d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095

Sharing

Copy URL

Twitter E-mail

General

Target

d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095
Size

414KB
MD5

9c212da781d631789af40e3b5a72d26b
SHA1

e157431a391504f6eb6050af1c576b218884bf3b
SHA256

d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095
SHA512

1d1e3cc3adb3df32185ecd61a6c52ef6d66e52f1b37eab0cc0b6c7e61b726144773ead33f16a12f26966803f0b739b6992e7b62e5c01fedb651b094a9acd7c8c
SSDEEP

6144:dIf3S1MiCFZ0lifGmpl4jyfS1pJ/OTRGxOVSjGu52b9efM:d43S6fflRq1pJ/Tbiu52p

Score

N/A

Malware Config

Signatures

Files

d66a644a2ce11f18d87ee7fd0fe6cedd44dbff28b952ea6ecd17617cfc2a9095
.exe windows x86

90807296642ac76618b5fcd100dfa8fa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateActCtxW
InterlockedCompareExchange
AddRefActCtx
ReleaseActCtx
CreateConsoleScreenBuffer
WaitNamedPipeA
GetTickCount
GetPrivateProfileSectionA
TryEnterCriticalSection
InitializeCriticalSection
LocalShrink
ReadFileEx
SetFileShortNameW
ReadProcessMemory
SetEvent
GetConsoleTitleA
AllocConsole
SetConsoleCtrlHandler
LoadLibraryA
LocalAlloc
GetProcAddress
GetSystemDefaultUILanguage
GetConsoleAliasA
DeleteTimerQueueEx
GetProcessHeaps
HeapQueryInformation
lstrlenA
lstrlenW
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
CloseHandle

winhttp

WinHttpOpen

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 225KB - Virtual size: 30.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90807296642ac76618b5fcd100dfa8fa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winhttp

Sections

.text Size: 63KB - Virtual size: 63KB

.data Size: 225KB - Virtual size: 30.9MB

.tls Size: 5KB - Virtual size: 4KB

.rsrc Size: 85KB - Virtual size: 84KB

.reloc Size: 34KB - Virtual size: 33KB

.text
Size: 63KB - Virtual size: 63KB

.data
Size: 225KB - Virtual size: 30.9MB

.tls
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 85KB - Virtual size: 84KB

.reloc
Size: 34KB - Virtual size: 33KB