bd5bee906d87632d7f2ee9417e295e27b8a188d8c709d9eeeccca57c906c6cc9

Sharing

Copy URL

Twitter E-mail

General

Target

bd5bee906d87632d7f2ee9417e295e27b8a188d8c709d9eeeccca57c906c6cc9
Size

255KB
MD5

d131c83e02079eb401b06efa61f24f64
SHA1

c287863877b16a7fc3298dedb45f2cb0b0e206b7
SHA256

bd5bee906d87632d7f2ee9417e295e27b8a188d8c709d9eeeccca57c906c6cc9
SHA512

50846a00c57d7c162c6c1ec989f556b20562318556af7d29cdb57064be2a084a0350de06c041749be734d077b956c94ae1ccffa084d5f32279f6575102fcbca6
SSDEEP

3072:+RZNj7at07LnZO1NR002TccraB0yrrZ2PNMxFE7PQuF4amDHU+PV5hdm3Wwp6VsS:9t07LnZOa02Tviz1qNM47hgUn3Wwtfq

Score

N/A

Malware Config

Signatures

Files

bd5bee906d87632d7f2ee9417e295e27b8a188d8c709d9eeeccca57c906c6cc9
.exe windows x86

eb56c140e8436d0b41c64e3c2984c0b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapLock
GlobalAlloc
InterlockedIncrement
GetConsoleCP
GetPrivateProfileSectionA
SetEvent
DeleteCriticalSection
LocalLock
GetModuleFileNameA
GetCurrentActCtx
FindActCtxSectionStringW
SetEndOfFile
GetFileAttributesW
ReleaseMutex
SleepEx
WaitForSingleObject
FindResourceExW
EndUpdateResourceA
GetConsoleTitleA
FreeConsole
SetConsoleTitleW
LoadLibraryA
LocalAlloc
GetProcAddress
CommConfigDialogA
GetFileAttributesA
HeapAlloc
GetCurrentProcess
lstrlenW
ReadFileEx
ReadFile
InterlockedDecrement
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
WideCharToMultiByte
CloseHandle
CreateFileA
LCMapStringA
LCMapStringW
GetConsoleMode
FlushFileBuffers
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

gdi32

GetCharWidthFloatW

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 73.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rahupe
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wixo
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cexi
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yalihew
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mude
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb56c140e8436d0b41c64e3c2984c0b0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 76KB - Virtual size: 75KB

.data Size: 103KB - Virtual size: 73.6MB

.rahupe Size: 27KB - Virtual size: 28KB

.wixo Size: 1024B - Virtual size: 626B

.cexi Size: 512B - Virtual size: 23B

.yalihew Size: 512B - Virtual size: 6B

.mude Size: 1024B - Virtual size: 963B

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 76KB - Virtual size: 75KB

.data
Size: 103KB - Virtual size: 73.6MB

.rahupe
Size: 27KB - Virtual size: 28KB

.wixo
Size: 1024B - Virtual size: 626B

.cexi
Size: 512B - Virtual size: 23B

.yalihew
Size: 512B - Virtual size: 6B

.mude
Size: 1024B - Virtual size: 963B

.rsrc
Size: 45KB - Virtual size: 44KB