570cd33f68c082029db54325ba30bd8171cb4f66e6c4ccc72f725e58f23613ea

Sharing

Copy URL

Twitter E-mail

General

Target

570cd33f68c082029db54325ba30bd8171cb4f66e6c4ccc72f725e58f23613ea
Size

238KB
MD5

979c8da06b36cc629ccf66e9503294f3
SHA1

a4749f9199f52c0d045ceb4d808b62e451e5a3f1
SHA256

570cd33f68c082029db54325ba30bd8171cb4f66e6c4ccc72f725e58f23613ea
SHA512

3910fdf3a8ec4e75ce5edffccf929479a7ee1a3a9e496d14ca42dae135dcb88192f69fd5fc2983120dd57ba63ca682c6b1e594736f82219389ea95f422702cd5
SSDEEP

3072:ZOtkY5wLGfHESNSTh4Ar9i85ftRo2RV8AxZ8qETVpmX7Asdn2+nd8afQ:ZO5lHESQikrovyIT6Bnd8eQ

Score

N/A

Malware Config

Signatures

Files

570cd33f68c082029db54325ba30bd8171cb4f66e6c4ccc72f725e58f23613ea
.exe windows x86

2f6a1d0e05ecc5a7eedcfc7da750925e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WriteTapemark
WaitNamedPipeA
SetDefaultCommConfigW
SetHandleInformation
GetWindowsDirectoryA
GetCurrencyFormatW
GetConsoleCP
SetFileShortNameW
FreeConsole
GetFileAttributesA
WriteConsoleW
GetModuleFileNameW
GetACP
lstrlenW
CreateMutexW
GetLastError
GetProcAddress
GetProcessHeaps
ReadFileEx
VerLanguageNameW
LoadLibraryA
LocalAlloc
FoldStringW
GetOEMCP
GetPrivateProfileSectionA
GetStringTypeW
GetConsoleTitleW
DeleteFileW
FindActCtxSectionStringW
lstrcpyW
LCMapStringW
VerifyVersionInfoW
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapCreate
SetFilePointer
CloseHandle
DeleteCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleMode
GetCPInfo
IsValidCodePage
Sleep
CreateFileA
SetStdHandle
FlushFileBuffers
HeapSize
MultiByteToWideChar
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW

advapi32

DeregisterEventSource

Exports

Exports

@MyFunc124@4

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kovo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yibem
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.geza
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f6a1d0e05ecc5a7eedcfc7da750925e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 92KB - Virtual size: 7.7MB

.kovo Size: 512B - Virtual size: 56B

.yibem Size: 1024B - Virtual size: 963B

.geza Size: 1KB - Virtual size: 4KB

.rsrc Size: 53KB - Virtual size: 53KB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 92KB - Virtual size: 7.7MB

.kovo
Size: 512B - Virtual size: 56B

.yibem
Size: 1024B - Virtual size: 963B

.geza
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 53KB - Virtual size: 53KB

.reloc
Size: 25KB - Virtual size: 24KB