449739b252b03a17ad6195843f556098da5d71370573b2d654870f86c95e324a

Sharing

Copy URL

Twitter E-mail

General

Target

449739b252b03a17ad6195843f556098da5d71370573b2d654870f86c95e324a
Size

358KB
MD5

0e39f9bcb4eabac1bff3354f19ceaa82
SHA1

fdc0d5d7848ad9b007ece99307600424e490c6b2
SHA256

449739b252b03a17ad6195843f556098da5d71370573b2d654870f86c95e324a
SHA512

bf6390121a4ef8063228e25a8c824dc66e602809a4f95a7f500b86bb9189deab4931f2b1764469d0aacc7547f6ee0ed0b6aa6d76319e3e1c4de4f1257a232164
SSDEEP

3072:CxRNAzXx1WBGvq6LJ+bn51PZnZtphtvI7MLROVgD1lbX81U2yRCOVsPHep:wuXbAGvxLJ+bvfhtvjRFDPbgUPRWf4

Score

N/A

Malware Config

Signatures

Files

449739b252b03a17ad6195843f556098da5d71370573b2d654870f86c95e324a
.exe windows x86

0f441ee472c86b0ca56f753f7b722a50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogA
HeapAlloc
SetConsoleTextAttribute
GetCurrentProcess
WaitForSingleObject
SleepEx
GetTickCount
WriteFile
FindResourceExA
GetConsoleCP
SetFileShortNameW
GetFileAttributesA
lstrlenW
GetProcAddress
ReadFileEx
ResetEvent
LoadLibraryA
LocalAlloc
HeapLock
GetModuleFileNameA
SetConsoleTitleW
GetPrivateProfileSectionA
GetConsoleTitleW
DeleteCriticalSection
EndUpdateResourceA
GetCurrentProcessId
FindActCtxSectionStringW
ReadFile
LocalUnlock
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleMode
FlushFileBuffers
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

advapi32

ReportEventW

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cucopa
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mifala
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yecemaw
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.net
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f441ee472c86b0ca56f753f7b722a50

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 85KB - Virtual size: 85KB

.data Size: 223KB - Virtual size: 8.1MB

.cucopa Size: 1024B - Virtual size: 626B

.mifala Size: 512B - Virtual size: 23B

.yecemaw Size: 512B - Virtual size: 6B

.net Size: 1024B - Virtual size: 963B

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 85KB - Virtual size: 85KB

.data
Size: 223KB - Virtual size: 8.1MB

.cucopa
Size: 1024B - Virtual size: 626B

.mifala
Size: 512B - Virtual size: 23B

.yecemaw
Size: 512B - Virtual size: 6B

.net
Size: 1024B - Virtual size: 963B

.rsrc
Size: 45KB - Virtual size: 44KB