46e2db7081cfa3a19b4c740c103ca3db02234c1aa5c4addf15ae2a09ab7a99fb

Sharing

Copy URL

Twitter E-mail

General

Target

46e2db7081cfa3a19b4c740c103ca3db02234c1aa5c4addf15ae2a09ab7a99fb
Size

301KB
MD5

6a7fa81b5d9147c23b0ba79e6e715fd1
SHA1

b2b7f2ef21e255b81ebf09fb0ffe077edec059b7
SHA256

46e2db7081cfa3a19b4c740c103ca3db02234c1aa5c4addf15ae2a09ab7a99fb
SHA512

0da996b9c356d5a0cb3ac0b2fdb7e3511b46eb1840664cc8ab87a9cb23f721d6ee2580f24392f87093704c25ae0c851e7e4ff86c539403a4f0e050cf5f8c1690
SSDEEP

6144:AphmSq+50OSePNX+spoyRG8YBm4MDZuzbgwu:emSq+qOSwNRponSDZunn

Score

N/A

Malware Config

Signatures

Files

46e2db7081cfa3a19b4c740c103ca3db02234c1aa5c4addf15ae2a09ab7a99fb
.exe windows x86

c698dff9877941757d23fcd110965bb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
EndUpdateResourceW
SetMailslotInfo
HeapFree
GetEnvironmentStringsW
SetConsoleScreenBufferSize
SetEvent
OpenSemaphoreA
GetTickCount
CreateActCtxW
Sleep
GetVersionExW
GetAtomNameW
GetModuleFileNameW
GetCPInfoExW
GetProcAddress
VirtualAlloc
LoadLibraryA
WriteConsoleA
LocalAlloc
TransmitCommChar
BeginUpdateResourceA
SetEnvironmentVariableA
SetConsoleTitleW
EraseTape
GetProcessAffinityMask
GetCPInfoExA
Module32Next
DeleteAtom
FindActCtxSectionStringW
FindNextVolumeA
LCMapStringW
lstrcpyA
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
WideCharToMultiByte
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReadFile
RtlUnwind
SetFilePointer
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
LoadLibraryW
WriteConsoleW
GetStringTypeW
HeapReAlloc
SetEndOfFile
GetProcessHeap
CreateFileW

Sections

.text
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hohaho
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c698dff9877941757d23fcd110965bb7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 217KB - Virtual size: 216KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 6KB - Virtual size: 36KB

.hohaho Size: 1024B - Virtual size: 626B

.rsrc Size: 51KB - Virtual size: 51KB

.text
Size: 217KB - Virtual size: 216KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 6KB - Virtual size: 36KB

.hohaho
Size: 1024B - Virtual size: 626B

.rsrc
Size: 51KB - Virtual size: 51KB