dbf969f428f5a928d1977cfa4754ec12ab49eb67c9e31c483bb2710f23b14ffb

Sharing

Copy URL

Twitter E-mail

General

Target

dbf969f428f5a928d1977cfa4754ec12ab49eb67c9e31c483bb2710f23b14ffb
Size

765KB
MD5

b472747014eeeaa6686efbf385f3cbad
SHA1

9105f34af98546dc2a701f54ce75b5bb1439db3f
SHA256

dbf969f428f5a928d1977cfa4754ec12ab49eb67c9e31c483bb2710f23b14ffb
SHA512

a7794af27d1d9a1d49e5f1f0946914acf5d6438d86ad10510774bdfe98da11400c340c4f49d5bf6d58e55d7210c10404f6906b4b8e0403b96f72033f1cc51504
SSDEEP

12288:VvN08JKfNmKXx0aM1VFphjlHK6ArzNOBzQlu5i5LNcC2gzpeHJ7sQr0wihnngV:v080NlXx011VLTqfIFQlWiBNxkp7f0g

Score

N/A

Malware Config

Signatures

Files

dbf969f428f5a928d1977cfa4754ec12ab49eb67c9e31c483bb2710f23b14ffb
.exe windows x86

e9503a060b34f2ce3765168e17b66379

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenJobObjectA
GetCurrentProcess
SetDefaultCommConfigW
GetSystemDefaultLCID
EnumCalendarInfoExW
GetConsoleAliasesLengthA
GetUserDefaultLangID
GetEnvironmentStrings
GlobalAlloc
LoadLibraryW
SetConsoleMode
GetGeoInfoA
GetSystemDirectoryA
GetBinaryTypeW
lstrcmpW
GetShortPathNameA
MoveFileExW
GetLastError
GetProcAddress
RemoveDirectoryA
GetDiskFreeSpaceW
GetAtomNameA
LoadLibraryA
LocalAlloc
CreateEventW
GetModuleFileNameA
GetCommTimeouts
FreeLibrary
InterlockedIncrement
LCMapStringA
FindResourceA
MultiByteToWideChar
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleHandleW
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
Sleep
HeapSize
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetFilePointer
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
HeapFree
RtlUnwind
HeapAlloc
HeapReAlloc
WriteConsoleW
SetStdHandle
FlushFileBuffers
RaiseException
CreateFileW
CloseHandle

gdi32

GetCharWidthFloatA

advapi32

ImpersonateAnonymousToken

Sections

.text
Size: 654KB - Virtual size: 654KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 39.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lopetu
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nan
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zid
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9503a060b34f2ce3765168e17b66379

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 654KB - Virtual size: 654KB

.data Size: 66KB - Virtual size: 39.2MB

.lopetu Size: 3KB - Virtual size: 2KB

.nan Size: 1024B - Virtual size: 624B

.zid Size: 512B - Virtual size: 23B

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 23KB - Virtual size: 23KB

.text
Size: 654KB - Virtual size: 654KB

.data
Size: 66KB - Virtual size: 39.2MB

.lopetu
Size: 3KB - Virtual size: 2KB

.nan
Size: 1024B - Virtual size: 624B

.zid
Size: 512B - Virtual size: 23B

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 23KB - Virtual size: 23KB