b6d82ef1862f6d88fbe0a4ebd3d485d8109f9368a7b5f6d855129e6d3f19793d

Sharing

Copy URL

Twitter E-mail

General

Target

b6d82ef1862f6d88fbe0a4ebd3d485d8109f9368a7b5f6d855129e6d3f19793d
Size

98KB
MD5

4ec32104de0ac83c28cbf8ebba215527
SHA1

9be2c050bc8eef8d6594ce228c859627b3f403d2
SHA256

b6d82ef1862f6d88fbe0a4ebd3d485d8109f9368a7b5f6d855129e6d3f19793d
SHA512

914d3497d965b7f4b551b008721da74fc82dcfe19e15b05ab90304522acabed59d928f997645804e7883d302f2adc8c5ae8031157295b00931cad2ea3f95b979
SSDEEP

1536:zzX80jLtirbWjCyQ5X9eiTJqQmQ3Xx4KR5uxYbvn1:H0bWjCyQ5X9PTJqQmQ3BjR5ux8vn1

Score

N/A

Malware Config

Signatures

Files

b6d82ef1862f6d88fbe0a4ebd3d485d8109f9368a7b5f6d855129e6d3f19793d
.exe windows x86

168acb07a82e26a86ea0ea880fbf1765

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocConsole
GetCPInfo
GetModuleHandleW
GlobalAlloc
GetConsoleWindow
CreateSemaphoreA
MultiByteToWideChar
lstrlenW
GetProcAddress
CreateTimerQueueTimer
GetPrivateProfileStringA
LoadLibraryA
GetModuleFileNameA
LCMapStringW
LCMapStringA
GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
GetStringTypeW

winhttp

WinHttpOpenRequest
WinHttpConnect
WinHttpCreateUrl

msimg32

TransparentBlt

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

168acb07a82e26a86ea0ea880fbf1765

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winhttp

msimg32

Sections

.text Size: 51KB - Virtual size: 50KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 587KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 51KB - Virtual size: 50KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 587KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 5KB - Virtual size: 5KB