1474d0e701fbe05b740d7a88e64a2785c74fec9b500f0a9bc84e0d1091bd4ba8

Sharing

Copy URL

Twitter E-mail

General

Target

1474d0e701fbe05b740d7a88e64a2785c74fec9b500f0a9bc84e0d1091bd4ba8
Size

371KB
MD5

aee36519b4b8b7a08daaaf6be304da8d
SHA1

836961f5e016a2240a4088071cecb22064e1fc44
SHA256

1474d0e701fbe05b740d7a88e64a2785c74fec9b500f0a9bc84e0d1091bd4ba8
SHA512

bf721f5bbd7f80d1ec4d8d56cbd59ffe75f7978a902c39891a4d6e1410d957291357fcbe1b6858ad68ab36cf301930e05e28c91090bca7b8d14ecadd5cac9f93
SSDEEP

6144:6XKmg8MkLZzIt8lw767lEj6AUTDsoKBrV6kNaoLf4:6fggVzIq4Yli6TTDsotk0

Score

N/A

Malware Config

Signatures

Files

1474d0e701fbe05b740d7a88e64a2785c74fec9b500f0a9bc84e0d1091bd4ba8
.exe windows x86

574b7db4174f91547c05bb948800e5a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
GetCurrentProcess
WaitForSingleObject
SetEvent
SleepEx
GetTickCount
WriteFile
FindResourceExA
GetConsoleCP
GlobalAlloc
SetFileShortNameW
GetFileAttributesA
ReadFile
SetConsoleTitleA
GetProcAddress
LocalLock
HeapUnlock
ReadFileEx
ResetEvent
LoadLibraryA
GetModuleFileNameA
GetPrivateProfileSectionA
GetConsoleTitleW
DeleteCriticalSection
EndUpdateResourceA
FindActCtxSectionStringW
CommConfigDialogA
HeapAlloc
lstrlenW
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleMode
FlushFileBuffers
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

gdi32

GetCharWidthFloatA

advapi32

ReportEventW

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dopo
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pazocik
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tohe
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zepe
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

574b7db4174f91547c05bb948800e5a3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 85KB - Virtual size: 85KB

.data Size: 237KB - Virtual size: 8.1MB

.dopo Size: 1024B - Virtual size: 626B

.pazocik Size: 512B - Virtual size: 23B

.tohe Size: 512B - Virtual size: 6B

.zepe Size: 1024B - Virtual size: 963B

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 85KB - Virtual size: 85KB

.data
Size: 237KB - Virtual size: 8.1MB

.dopo
Size: 1024B - Virtual size: 626B

.pazocik
Size: 512B - Virtual size: 23B

.tohe
Size: 512B - Virtual size: 6B

.zepe
Size: 1024B - Virtual size: 963B

.rsrc
Size: 45KB - Virtual size: 44KB