b5aa6d1cee59b22ab462fb2a90b2911bc978bd60580a17ed6c8202b4a9b1b7b8

Sharing

Copy URL

Twitter E-mail

General

Target

b5aa6d1cee59b22ab462fb2a90b2911bc978bd60580a17ed6c8202b4a9b1b7b8
Size

625KB
MD5

ecc141a962c54bf7f416f23ba40c9f55
SHA1

590b91cc13bdcb6fcf4a6dd176f1a8697eb7ec90
SHA256

b5aa6d1cee59b22ab462fb2a90b2911bc978bd60580a17ed6c8202b4a9b1b7b8
SHA512

64b7bd6471e169f65b214aaedb84f9877f7db062128952cf05442915fc51d2bacaf8181781d6a43f35e6dd84314ab81b605c19beea5bfc6d2afce9226ecad027
SSDEEP

12288:kG0B8yneuY0cji7nR/Gplo6szysTbor9SKgAo9/fISuB08C7D8p:s+yQ0miF/eloxzxTEr/9wf0B0JDm

Score

N/A

Malware Config

Signatures

Files

b5aa6d1cee59b22ab462fb2a90b2911bc978bd60580a17ed6c8202b4a9b1b7b8
.exe windows x86

b628ca1d73aa557d205f2b12ac720564

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetModuleFileNameA
GetConsoleAliasesLengthA
OpenEventA
InterlockedIncrement
GetSystemDirectoryW
MoveFileExW
GlobalFree
GetCPInfoExW
BeginUpdateResourceW
EnumCalendarInfoExW
LoadLibraryA
MoveFileA
CopyFileA
LocalAlloc
GetProcAddress
EnumResourceNamesW
GlobalAlloc
RemoveDirectoryA
GetLastError
SetCommTimeouts
OpenJobObjectW
LCMapStringW
GetAtomNameA
GetFileAttributesA
SetConsoleTitleA
ReplaceFileA
GetBinaryTypeA
GetShortPathNameW
GetUserDefaultLangID
GetGeoInfoA
GetConsoleAliasW
GetTickCount
SetLastError
GetCurrentProcessId
FreeLibrary
GetEnvironmentStrings
GetFileTime
FindResourceExA
SetConsoleMode
GetDiskFreeSpaceW
PulseEvent
WaitForSingleObject
SetDefaultCommConfigW
HeapAlloc
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
RtlUnwind
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
IsProcessorFeaturePresent
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapFree
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
CloseHandle
CreateFileA
GetStringTypeW
ReadFile
WriteConsoleW
SetStdHandle
FlushFileBuffers
HeapReAlloc
SetEndOfFile
GetProcessHeap
HeapSize
CreateFileW

Sections

.text
Size: 462KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zedub
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.goro
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b628ca1d73aa557d205f2b12ac720564

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 462KB - Virtual size: 461KB

.data Size: 66KB - Virtual size: 4.8MB

.zedub Size: 1024B - Virtual size: 624B

.goro Size: 512B - Virtual size: 23B

.rsrc Size: 94KB - Virtual size: 94KB

.text
Size: 462KB - Virtual size: 461KB

.data
Size: 66KB - Virtual size: 4.8MB

.zedub
Size: 1024B - Virtual size: 624B

.goro
Size: 512B - Virtual size: 23B

.rsrc
Size: 94KB - Virtual size: 94KB