9fb0bbfedfcc264a83a8968fce7e9a64df16000921602794f9a68ecb7e4f8783

Sharing

Copy URL

Twitter E-mail

General

Target

9fb0bbfedfcc264a83a8968fce7e9a64df16000921602794f9a68ecb7e4f8783
Size

295KB
MD5

1c30e5420d07219610e04bca768ced5e
SHA1

4a15cc924dcbcf33f4ff4a74865128efbbf49883
SHA256

9fb0bbfedfcc264a83a8968fce7e9a64df16000921602794f9a68ecb7e4f8783
SHA512

7b42d1806a9d7b5c16f5d01eaa08074724de68bbe051152eb2650c6ad1b3eb8596579aecb50e351a6d727b90e12019a730b884a5888f3cfb426e7844a0ba0458
SSDEEP

3072:qdxNL9U7b6jLeizuRFr6FBkcw4s/EyN1OpbQPCSs8Afw6SIBIHQx0duXrSFhCemJ:6USjLeiKr6FBkpqdQk3SC0QUjbDchfV

Score

N/A

Malware Config

Signatures

Files

9fb0bbfedfcc264a83a8968fce7e9a64df16000921602794f9a68ecb7e4f8783
.exe windows x86

9878c15273ffbe06d19cf0ab8f2a4146

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
InterlockedIncrement
GetConsoleCP
GetPrivateProfileSectionW
SetEvent
DeleteCriticalSection
LocalLock
WriteFile
FindActCtxSectionGuid
FindActCtxSectionStringW
SetFileShortNameW
GetFileAttributesA
ResetEvent
ReleaseSemaphore
SleepEx
WaitForSingleObject
FindResourceExA
EndUpdateResourceA
GetConsoleTitleW
FreeConsole
SetConsoleTitleA
LoadLibraryA
GetProcAddress
CommConfigDialogA
HeapAlloc
HeapUnlock
GetCurrentProcess
lstrlenW
GetModuleFileNameA
ReadFileEx
ReadFile
InterlockedDecrement
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
WideCharToMultiByte
CloseHandle
CreateFileA
LCMapStringA
LCMapStringW
GetConsoleMode
FlushFileBuffers
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

gdi32

GetCharWidthFloatW

advapi32

ReportEventW

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 73.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fiwiy
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kojazal
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ceci
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wozoh
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cafe
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9878c15273ffbe06d19cf0ab8f2a4146

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 86KB - Virtual size: 86KB

.data Size: 132KB - Virtual size: 73.6MB

.fiwiy Size: 27KB - Virtual size: 28KB

.kojazal Size: 1024B - Virtual size: 626B

.ceci Size: 512B - Virtual size: 23B

.wozoh Size: 512B - Virtual size: 6B

.cafe Size: 1024B - Virtual size: 963B

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 86KB - Virtual size: 86KB

.data
Size: 132KB - Virtual size: 73.6MB

.fiwiy
Size: 27KB - Virtual size: 28KB

.kojazal
Size: 1024B - Virtual size: 626B

.ceci
Size: 512B - Virtual size: 23B

.wozoh
Size: 512B - Virtual size: 6B

.cafe
Size: 1024B - Virtual size: 963B

.rsrc
Size: 45KB - Virtual size: 44KB