820560a7e2c2bf9def3fb1e24fe5b8c224cfe7da60da6933210102bb7e37b77c

Sharing

Copy URL

Twitter E-mail

General

Target

820560a7e2c2bf9def3fb1e24fe5b8c224cfe7da60da6933210102bb7e37b77c
Size

367KB
MD5

ddeb1c9c0aba9cd5b40e5490199e01b0
SHA1

b4b84473f07825432da0e80d73508433c6a1eacb
SHA256

820560a7e2c2bf9def3fb1e24fe5b8c224cfe7da60da6933210102bb7e37b77c
SHA512

a99c8ab5d9c4c4b159a49bf63951be5da0ce1e9045238107df9c3ca1f21a89444837fe89218ef0f67ef3158f3733b65a6562602737388d8e9191786b380f9231
SSDEEP

6144:6bQXCdQRTAfVkqNglXicYlwMWTHgOkXdhF4:3ZTUVkDocYlOgO8hF4

Score

N/A

Malware Config

Signatures

Files

820560a7e2c2bf9def3fb1e24fe5b8c224cfe7da60da6933210102bb7e37b77c
.exe windows x86

4d2c4e99b85cd58b4d479f04e1277b4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogA
HeapAlloc
SetConsoleTextAttribute
GetCurrentProcess
WaitForSingleObject
SleepEx
GetTickCount
WriteFile
FindResourceExA
GetConsoleCP
SetFileShortNameW
GetFileAttributesW
lstrlenW
GetProcAddress
ReadFileEx
ResetEvent
LoadLibraryA
LocalAlloc
HeapLock
GetModuleFileNameA
SetConsoleTitleW
GetPrivateProfileSectionA
GetConsoleTitleW
DeleteCriticalSection
EndUpdateResourceA
GetCurrentProcessId
FindActCtxSectionStringW
ReadFile
LocalUnlock
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateFileA
SetStdHandle
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

advapi32

ReportEventW

winhttp

WinHttpCloseHandle

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 8.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wudufoc
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rehe
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kaged
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d2c4e99b85cd58b4d479f04e1277b4d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

winhttp

Sections

.text Size: 83KB - Virtual size: 82KB

.data Size: 223KB - Virtual size: 8.1MB

.wudufoc Size: 1024B - Virtual size: 626B

.rehe Size: 512B - Virtual size: 23B

.kaged Size: 512B - Virtual size: 6B

.rsrc Size: 57KB - Virtual size: 57KB

.text
Size: 83KB - Virtual size: 82KB

.data
Size: 223KB - Virtual size: 8.1MB

.wudufoc
Size: 1024B - Virtual size: 626B

.rehe
Size: 512B - Virtual size: 23B

.kaged
Size: 512B - Virtual size: 6B

.rsrc
Size: 57KB - Virtual size: 57KB