4ff0a08581dc12600405e56844e326a150079f3e6f7becf6e419acc71437f5ed

Sharing

Copy URL

Twitter E-mail

General

Target

4ff0a08581dc12600405e56844e326a150079f3e6f7becf6e419acc71437f5ed
Size

408KB
MD5

1304b31429b3b049ab4fd53fc4866753
SHA1

42bca02324e018716f64c4c7d36e2f3dd780d69e
SHA256

4ff0a08581dc12600405e56844e326a150079f3e6f7becf6e419acc71437f5ed
SHA512

c6d63f83901548afd9aac10893d2998525251aa34fa915285e58d6317f466f19606c032fb2da32f89c5bea1495b3f60016bd95fcec0f9a02502281109e66e4ba
SSDEEP

6144:iH6dK3cN/KD3VjQP7Cep4N/EoLKLcoNzMcRzTNo7Vt0pigavwVf:vK3cNs3VjQP7pAEoLKFMchTNoYM

Score

N/A

Malware Config

Signatures

Files

4ff0a08581dc12600405e56844e326a150079f3e6f7becf6e419acc71437f5ed
.exe windows x86

c69e88423d6ba76171ae4ccf927da66b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
SetDefaultCommConfigA
GetConsoleAliasesLengthW
FreeLibrary
InterlockedIncrement
MoveFileExW
OpenJobObjectA
GetCurrentProcess
WaitForSingleObject
GetTickCount
EnumCalendarInfoExW
GetUserDefaultLangID
GetEnvironmentStrings
FindResourceExA
GlobalAlloc
LoadLibraryW
GetConsoleMode
GetFileAttributesW
ReplaceFileW
GetAtomNameW
GetGeoInfoA
GetSystemDirectoryA
GetBinaryTypeW
SetConsoleTitleA
GetShortPathNameA
LCMapStringA
GetLastError
SetLastError
GetProcAddress
LoadLibraryA
GetProcessId
RemoveDirectoryW
GetDiskFreeSpaceA
GetCommTimeouts
GetFileTime
OpenEventW
HeapAlloc
MultiByteToWideChar
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
WideCharToMultiByte
GetConsoleCP
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
LCMapStringW
GetStringTypeW
ReadFile
CloseHandle
CreateFileA
WriteConsoleW
SetStdHandle
FlushFileBuffers
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
SetEndOfFile
GetProcessHeap
CreateFileW

Sections

.text
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.suken
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nigup
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c69e88423d6ba76171ae4ccf927da66b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 239KB - Virtual size: 238KB

.data Size: 66KB - Virtual size: 4.8MB

.suken Size: 1024B - Virtual size: 624B

.nigup Size: 512B - Virtual size: 23B

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 239KB - Virtual size: 238KB

.data
Size: 66KB - Virtual size: 4.8MB

.suken
Size: 1024B - Virtual size: 624B

.nigup
Size: 512B - Virtual size: 23B

.rsrc
Size: 100KB - Virtual size: 100KB