d5f7964dc07bb3465fbc3a995fcadd623197716480f6b86518a5dfdafc9f3af7

Sharing

Copy URL

Twitter E-mail

General

Target

d5f7964dc07bb3465fbc3a995fcadd623197716480f6b86518a5dfdafc9f3af7
Size

406KB
MD5

5bae3b513617471179f9531cd1d9d767
SHA1

acbe505a07e9b974e28dfd2c91052ff0064e366d
SHA256

d5f7964dc07bb3465fbc3a995fcadd623197716480f6b86518a5dfdafc9f3af7
SHA512

4cfeb1c939c7d751816ed948ddb30fccf96bee7c8adccc29192b18b40865b440cb11482ee16906e3d071375b0c7ddd087ae83f2eb0ed21cd17bbc2d21586dff1
SSDEEP

6144:i1xYJ/Jcv+FYjj9aHHQxMZIL+S4NICOcL94WTxMFhMjK6sxFlm5AhekQY:2xYJRcRcnQhLX4NIe4XmjKR0TkQY

Score

N/A

Malware Config

Signatures

Files

d5f7964dc07bb3465fbc3a995fcadd623197716480f6b86518a5dfdafc9f3af7
.exe windows x86

1718254865a883fc2d7cbf3620d24d33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
FreeConsole
GetFileAttributesA
FindNextVolumeW
WriteConsoleW
SetSystemPowerState
DisconnectNamedPipe
GetFileSizeEx
MoveFileW
DisableThreadLibraryCalls
OpenMutexA
GlobalAlloc
GetFileType
GetNumberFormatW
GetPrivateProfileSectionNamesA
ContinueDebugEvent
FreeEnvironmentStringsW
CreateMailslotA
BuildCommDCBA
VirtualProtect
DeleteFileW
GetFileInformationByHandle
GetTickCount
CallNamedPipeW
CreateDirectoryExA
SetThreadExecutionState
SetConsoleTextAttribute
VirtualQuery
_llseek
EnumResourceNamesW
DeleteTimerQueue
ExitProcess
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
GetLastError
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
HeapAlloc
SetLastError
GetCurrentThreadId
GetProcessHeap
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
LCMapStringW
ReadFile
ReadConsoleW
OutputDebugStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileW
CloseHandle

advapi32

CloseEventLog
ClearEventLogW
GetFileSecurityW
RegSetValueExA
ObjectPrivilegeAuditAlarmA
OpenSCManagerW
RegisterEventSourceA
RegisterEventSourceW
OpenServiceA
QueryServiceLockStatusW

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1718254865a883fc2d7cbf3620d24d33

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Sections

.text Size: 67KB - Virtual size: 66KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 22KB - Virtual size: 85KB

.text Size: 238KB - Virtual size: 237KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 31KB - Virtual size: 30KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 67KB - Virtual size: 66KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 22KB - Virtual size: 85KB

.text
Size: 238KB - Virtual size: 237KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 31KB - Virtual size: 30KB

.reloc
Size: 5KB - Virtual size: 5KB